last executing test programs: 9m21.007990462s ago: executing program 32 (id=68): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0xa4f3, @empty}}, {{0xa, 0x4e21, 0x8000, @rand_addr=' \x01\x00'}}}, 0x108) 9m20.053116452s ago: executing program 33 (id=90): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x9, 0xfff3}, {}, {0x10, 0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7, 0x0, 0xfffe}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x4, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40004}, 0x2008c010) 8m49.81174377s ago: executing program 34 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002d00)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000002e40), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000002e80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x28, r2, 0x8a4595cdf212b661, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000842}, 0x40004) 8m46.536829142s ago: executing program 35 (id=829): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000080)=@framed={{0xdb, 0xa, 0xa, 0xfe00, 0x110, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00', 0x5}, 0x94) 8m23.118782804s ago: executing program 36 (id=1272): socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 8m17.64619678s ago: executing program 37 (id=1363): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 8m17.343947625s ago: executing program 38 (id=1359): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 8m10.675966833s ago: executing program 39 (id=1431): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, r0, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 8m9.58376798s ago: executing program 40 (id=1446): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) 8m8.893313826s ago: executing program 41 (id=1451): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927f, 0x1e9) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r1, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xf) syz_clone3(&(0x7f0000000340)={0x200103000, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 7m31.053113432s ago: executing program 42 (id=1900): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x100, 0xc0000000, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0xd, 0x10}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x3c}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m30.096455712s ago: executing program 43 (id=1917): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x3, 0x8, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x304}, "5b1404c3bd0038c6", "a1d6fcca11a60f84f8fb6cd0934e7699eb89e1ac24e540159e8e5d7aaf029a2e", '\b\x00', "82020b23ec3a405d"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="14000000000000001a01000001000000080000000000000010"], 0x28}, 0x0) 7m1.035217859s ago: executing program 44 (id=2109): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r1, @ANYBLOB="2e00000010"], 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) 6m58.643275814s ago: executing program 45 (id=2145): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2041, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 6m57.987895158s ago: executing program 46 (id=2161): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x2007, &(0x7f0000000980)=0x0) r2 = eventfd2(0x39, 0x80000) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xdff16000) io_getevents(r1, 0x2, 0x2, &(0x7f00000001c0)=[{}, {}], 0x0) 6m22.920425119s ago: executing program 47 (id=2766): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5m22.128695263s ago: executing program 48 (id=3594): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0xd]}, 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000007c0)={0x0, 0xfffffffa}) 5m3.176589752s ago: executing program 49 (id=4149): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x80b0, 0x4d, 0x800020, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x8a, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x2) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x11, 0x0, 0x4) 4m47.847446403s ago: executing program 50 (id=4157): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) openat(r2, &(0x7f0000000040)='.\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m46.826947746s ago: executing program 51 (id=4371): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x550, &(0x7f0000000640)="$eJzs3cFrHNUfAPDvzDb5pW1+JhWR1otBoRbEbZJqRC+mOSsIevHW0GxK7LYpSQQTPLQH8eKhgtCDoJRe/CM8BMF/wJP15lUoImnR28rsziZrspuEkHXSzOcDs/vevE3e++7wMu/NzCMBlNZY9pJGnIuIK0nESEfZicgLx1qf2/jzs6vZlkSj8cEfSST5vvbnk/z9dJ4ZioifZyKereysd3l17fpsvV5byvMXV27curi8uvbawo3Za7VrtZtTr7/x1uSbU5OXDi/Wj36o3zv768xfXyw9Of/g7/g4iekYzss64zgsYzG2+Z10yr7Xdw67soJU8ni6xcnR1z5+AxHxfIxEJe/1mZFY+LLQxgF91ahENICSSvR/KKn2OKA9t+/HPPgoe3S5NQHaGf+J1rWRGGrOjU5tJB0zo9Z8d/QQ6s/qGPrp+6+yLfp0HWI3t+9ExNlu8SfNto02r+Jk8af/ij+NiPH8Pds/ecD6x7bln6b4pzvinzlg/UXHD0A5rV9unch3nv/SzfFPdBn/DHc5dx1E0ee/3uO/rfgrPcZ/7++zjgf3v5vuVdY5/su2rP72WPC/8OhOxAtd408240+6xJ+Ne67ss46Xat8+7FVWdPyN+xHnu85/tu5oJbven7w4v1Cvjbdeu9dx9/PGvV71Fx1/dvxP9Yh/t+Of7bu1zzp+fPzkt15le8ef/j6YfNhMDeZ7Pp1dWVmaiBhM3t25f4+JSPsz7d+RxX/h5d37f7f4T2Zzh33Gv3Fh6r2Dx99fWfxzBzz+d/dZx+R49ZteZUXHDwAAAAAAAMdJ2nyWI0mrm+k0rVZba3ifi1NpfXF55dX5xU9uzrWe+RiNgbR9q3uklU+y/ET+PGw7P7ktfykizkTE15WTzXz16mJ9rujgAQAAAAAAAAAAAAAAAAAA4Ig4vW39/+NKa/0/UBInim4AUBj9H8pL/4fy0v+hvPR/KC/9H8pL/4fy0v+hvPR/KC/9H8pL/wcAAACAY+nMi+sPk4i4/fbJ5pYZzMsGCm0Z0G9p0Q0AClMpugFAYdz6h/IyxweSPcqHehWs7/WTAAAAAAAAAAAAAMBheeWc9f9QVtb/Q3lZ/w/lZf0/lJc5PmD9PwAAAAAAAAAAAAAcfcPNLUmr+Vrg4UjTajXi/xExGgPJ/EK9Nh4Rz0TEL5WB/2X5iaIbDQAAAAAAAAAAAAAAAAAAAMfM8ura9dl6vbYkISEhsZko+i8TAAAAAAAAAAAAAAAAAACUz9ai36JbAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADF2fr///1LFB0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPB0+icAAP//zv4dAQ==") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x7, 0x41, 0x0, 0x3, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000001800)={0x4, 0x4, 0x6, 0x5, 0x1b, "3e533005a5b152308435c559a2e30053a727c9"}) 3m41.788341492s ago: executing program 52 (id=5058): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r2, @ANYBLOB="1400020000000000000000000000ffff000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 3m41.740908924s ago: executing program 53 (id=5057): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000001d80)={@private, @multicast2}, &(0x7f0000001dc0)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) 3m41.705206505s ago: executing program 54 (id=5050): timer_create(0x3, &(0x7f0000000180)={0x0, 0x19, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000240)={{r1, r2+60000000}, {0x77359400}}, 0x0) r3 = epoll_create(0xc5ad) clock_gettime(0x0, &(0x7f0000002440)) epoll_pwait2(r3, &(0x7f0000002400)=[{}], 0x1, 0x0, 0x0, 0x0) timer_gettime(0x0, &(0x7f0000002500)) 3m41.595280791s ago: executing program 55 (id=5054): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000140)=[{r1, 0x8200}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 3m14.826477669s ago: executing program 5 (id=5337): unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x5}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000001000)=""/35, 0x23}], 0x1}, 0x1}], 0x1, 0x0, 0x0) 3m14.80527577s ago: executing program 5 (id=5338): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x54, r2, 0x1, 0x0, 0x25dfdbfc, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}}, {0x14, 0x2, @in={0x2, 0x0, @empty}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0xfffffffffffffffe, 0x40040) ioctl$FICLONE(r3, 0x40049409, r1) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x54, r2, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x20000800) 3m14.743682613s ago: executing program 5 (id=5339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "fe"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) 3m14.678013247s ago: executing program 5 (id=5342): syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='wchan\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x80000050) mkdir(&(0x7f0000000000)='./bus\x00', 0x88) 3m14.653922348s ago: executing program 5 (id=5343): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 3m14.62901994s ago: executing program 5 (id=5344): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 3m9.25099704s ago: executing program 6 (id=5386): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = timerfd_create(0x0, 0x80000) read(r1, &(0x7f0000001080)=""/4096, 0x1000) 3m8.196463005s ago: executing program 6 (id=5394): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2, 0x8000}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) 3m8.116118819s ago: executing program 6 (id=5396): write$nci(0xffffffffffffffff, &(0x7f0000000640)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x0, 0x3, 0x0, 0x9, {0x3a, 0x3, "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"}}, 0x15a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "b9c5ec18837993a6", "94dd7adf162b79d63db3cda2b4b7c3f2779d7b777112824651d28000", "6ebc780b", "3f23b1802d00cd92"}, 0x38) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1400000000000000"], 0x170}, 0x4080) 3m8.063440032s ago: executing program 6 (id=5397): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x804b14, &(0x7f0000000040)={[{@nobarrier}]}, 0xfc, 0x491, &(0x7f0000000200)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) open(&(0x7f00000001c0)='./bus\x00', 0x400141042, 0x2e) mount(&(0x7f0000000240)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) fdatasync(r0) 3m6.75544672s ago: executing program 6 (id=5405): socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x26, 0x0, 0x0, 0x1f00, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m6.252124847s ago: executing program 6 (id=5416): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x400000002, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) 3m6.19435257s ago: executing program 56 (id=5416): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$kcm(0x10, 0x400000002, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x1, 0x0) 2m59.452899711s ago: executing program 57 (id=5344): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2m22.190915317s ago: executing program 7 (id=6086): syz_open_dev$loop(0x0, 0x400000c, 0x40481) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x200, @empty}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 2m22.055158244s ago: executing program 7 (id=6091): epoll_create1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0x1d, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m21.984059627s ago: executing program 7 (id=6092): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x832, 0x2, @perf_bp={0x0}, 0x0, 0x6, 0x4000000, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2}, 0xc) 2m21.649361265s ago: executing program 7 (id=6097): write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f00000015c0)={[{@init_itable}, {@norecovery}, {@abort}, {@jqfmt_vfsv1}, {@orlov}, {@jqfmt_vfsold}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@bsdgroups}]}, 0xfd, 0x501, &(0x7f0000000e80)="$eJzs3c9vI1cdAPCvndhxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHEpByR+RKAGiYPRjMdZb2JvrM0Ph/jzkUbz3rxZf9+Ld97bfLPxC2Bs3Y6Ig4goRsT7ETGXXc9lR7zTOZL7Pjt8tHp0+Gg1F+32e//Ipe3Jtej5M4lb2WuWIuIH34n4ce503Obe/uZKrVbdyeoLrfr2QnNv/95GfWW9ul7dqlSWl5YX37r/ZuXCxvpKvZiVvvzp7w++8dOkW7PZld5xXKTO0AvHcRKTEfG9ywg2AhPZeIqj7gjPJB8RL0bEq+nzPxcT6bsJANxk7fZctOd66wDATRdpDiyXL2e5gNnI58vlTg7vpZjJ1xrN1t2Hjd2ttU6ubD4K+Ycbtepiliucj0IuqS+l5cf1yon6/Yh4ISJ+PjWd1surjdraCP/dAwDj7NaJ9f/fU531HwC44Uqj7gAAcOWs/wAwfqz/ADB+rP8AMH466//0UHcBADeDlR0Axo/1HwDGyvfffTc52kfZ51+vfbC3u9n44N5atblZru+ullcbO9vl9UZjPf3MnvpZr1drNLaX3ojdD+e/ud1sLTT39h/UG7tbrQfp53o/qBbSuw6uYGQAwCAvvPLJn3LJivz2dHpEz14OhZH2DLhs+VF3ABiZiVF3ABgZu33B+DrH9/jSA3BD9Nmi9wmlfr8g1N1ABPi/dOcL8v8wrnry//4XMIwZ+X8YX/L/ML7a7dywe/7HsDcCANebHD8w4Of/L2bn32Q/HPjR2sk7Pr7MXgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD11t3/t5ztBT4b+Xy5HPFcRMxHIfdwo1ZdjIjnI+KPU4WppL404j4DAOeV/2su2//rztzrs080vXzruFiMiJ/88r1ffLjSau38IaKY++dU93rr4+x65ep7DwCcrbtOp+eeb+Q/O3y02j2usj9/+3ZElDrxjw6LcXQcfzIm03MpChEx869cVu/I9eQuzuPgo4j4fL/x52I2zYF0dj49GT+J/dyVxs8/ET+ftnXOydficxfQFxg3nyTzzzv9nr983E7P/Z//UjpDnV82/yUvtXqUzoGP43fnv4kB89/tYWO88bvvdkrTp9s+ivjiZEQ39lHP/NONnxsQ//Uh4//5Sy+/Oqit/auIO9E/fm+shVZ9e6G5t39vo76yXl2vblUqy0vLi2/df7OykOaoFwavBn9/++7zg9qS8c8MiF86Y/xfHXL8v/7v+z/8ylPif/21fvHz8dJT4idr4teGjL8y89vSoLYk/tqA8Z/1/t8dMv6nf9k/tW04ADA6zb39zZVarbqjcJ0Lxeztui79GVQoXXIPk6/B9Rjp6cK3ripWMfo3/ey1vn9J2u1nijVoxriIrBtwHRw/9BHxn1F3BgAAAAAAAAAAAAAA6OsqfmNp1GMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg5vpfAAAA//9ZYMr3") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x5) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0x0, &(0x7f0000000340)={0x800, 0x5, 0x2, 0xffffffffffffffff, 0x3, 0x800000000008, 0x2, 0x9, 0x2}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000980)={0xf4a1, 0x200, 0x800, 0x4b07}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) 2m21.36380771s ago: executing program 7 (id=6102): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=ANY=[@ANYBLOB="050000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) 2m20.310067105s ago: executing program 7 (id=6114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$P9_RSTATFS(r1, &(0x7f0000000340)={0x43, 0x9, 0x1, {0x8, 0x2, 0x7c70, 0x8, 0x3, 0x15e1, 0x53200000000, 0x8000000000000001, 0x4}}, 0x43) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 2m20.247827179s ago: executing program 58 (id=6114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$P9_RSTATFS(r1, &(0x7f0000000340)={0x43, 0x9, 0x1, {0x8, 0x2, 0x7c70, 0x8, 0x3, 0x15e1, 0x53200000000, 0x8000000000000001, 0x4}}, 0x43) ioctl$EVIOCREVOKE(r2, 0x40044591, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1m52.44165985s ago: executing program 0 (id=6547): sendmsg(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=[{0xc8, 0x10e, 0x1, "5ce64a89b608f23e3e331a4b9b542187b42b452a167dd0671017878cc67933237be5ab8b35da515f456481f500f1354e09dc97b189973c16a18bd10de55335b16facefa4456e5f82ae468f808d4975e4caa3ef0d30c2590dbd7b04ce246feb6583db9ac436303664b5a95c8476f51a8df576e50e2d8660c483e980e228e334f51f6eca1f33fd265077a9995b4a6c4a66eb6cd783efe0b1c0578b80742df69fdb4acf5d84182e747f25072f128c49f44233"}, {0x430, 0xff, 0x5, "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"}], 0x4f8}, 0x4000044) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0xfd, 0xc8e}, {0x16}]}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000c00)=[{{&(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 1m52.378030274s ago: executing program 0 (id=6551): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x12, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) unshare(0xa000200) r0 = semget$private(0x0, 0x3, 0x0) semtimedop(r0, &(0x7f0000000340)=[{0x0, 0x2, 0x1800}], 0x1, 0x0) r1 = semget$private(0x0, 0x4000, 0x0) semtimedop(r1, &(0x7f0000000640)=[{0x4, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) 1m52.25604034s ago: executing program 0 (id=6553): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r0, 0xee01, r1) keyctl$setperm(0x5, r0, 0x172831) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) 1m52.224850651s ago: executing program 0 (id=6555): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0x0, 0x40000}, 0x20) 1m52.099247008s ago: executing program 0 (id=6557): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x1224, 0x0, 0x0, 0x5, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x5, 0x14, 0x0, &(0x7f00000001c0)="2e9a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) 1m51.712108838s ago: executing program 0 (id=6561): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) 1m51.711597628s ago: executing program 59 (id=6561): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) 1m41.474889823s ago: executing program 8 (id=6702): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r0) 1m41.365852838s ago: executing program 8 (id=6704): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kexec_load(0x2, 0x8, &(0x7f0000000140)=[{0x0, 0xb, 0x8000000000, 0x80000000}], 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2c, &(0x7f0000000000)=0xfffffffd, 0x4) 1m40.057502777s ago: executing program 8 (id=6719): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x100000000, 0xe}, 0x104b18, 0x6, 0x0, 0x1, 0x5, 0x4, 0xb, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) unshare(0x28020480) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m39.859999247s ago: executing program 8 (id=6723): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000300)='./file0\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) 1m39.816176689s ago: executing program 8 (id=6725): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1m39.582506761s ago: executing program 8 (id=6726): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r4 = dup2(r2, r3) close_range(r4, 0xffffffffffffffff, 0x0) 1m39.532751134s ago: executing program 60 (id=6726): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r4 = dup2(r2, r3) close_range(r4, 0xffffffffffffffff, 0x0) 2.818973063s ago: executing program 2 (id=8358): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}}, 0x1c}}, 0x0) 2.557963547s ago: executing program 2 (id=8371): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ccb000/0x9000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00009e9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.436706393s ago: executing program 2 (id=8363): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000200)=ANY=[@ANYBLOB="616c6c6f775f7574696d653d30303030303030303030303030303136323134372c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c696f636861727365743d6d61637475726b6973682c6e6f6e756d7461696c3d302c696f636861727365743d6b6f69382d72752c756e695f786c6174653d302c696f636861727365743d757466382c6572726f72733d636f6e74696e75652c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e39352c7379735f696d6d757461626c652c757466383d302c0074c3fc52ac6365d676e1"], 0x1, 0x3b6, &(0x7f00000006c0)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2.338102078s ago: executing program 2 (id=8365): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r2 = io_uring_setup(0x5da2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000065000/0x2000)=nil, 0x2000, 0x3000004, 0x110, r2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 2.337566698s ago: executing program 9 (id=8366): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 2.236846613s ago: executing program 9 (id=8368): lstat(&(0x7f00000000c0)='./file1/file0\x00', 0x0) mknod$loop(&(0x7f0000000900)='./file1\x00', 0x20, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x652c0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x844, 0x32, 0x43a1bd76, 0x7, 0x9, 0x5, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newtaction={0x84, 0x30, 0x1, 0x0, 0x0, {}, [{0x70, 0x1, [@m_mpls={0x6c, 0x1, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x3, 0x6, 0x1f7c, 0x9}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6bde2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 2.052165673s ago: executing program 9 (id=8375): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380), 0x3, 0x44d, &(0x7f0000001080)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd0, &(0x7f0000000080)=0x6, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x40, 0x10, 0x4, @remote, @private2, 0x8040, 0x0, 0xfffffffa, 0x2}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r3, 0x0, 0x1}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x0) 2.051846783s ago: executing program 2 (id=8376): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x7c}}, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0) 1.967119827s ago: executing program 4 (id=8377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000004000000060000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={0xffffffffffffffff, 0x0}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000004dc0)={0x0, 0x0, &(0x7f0000000f80)=[{0x0}, {0x0}, {&(0x7f0000000d00)}], 0x3, &(0x7f0000002a00)=[{0x10, 0x101, 0xb5}, {0x30, 0x117, 0x10001, "3efc0f57f9b970b8294281b5893dae431f0d16b24496a5721c78e392"}, {0xcd0, 0x10a, 0x0, "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"}, {0x58, 0x102, 0x0, "764e4c342443b6921f00aae041f274b1ca52331c3bb922952d1e427c4114d63b1325c5d3268cfcf06508fe16403f88e04f5f5293e5517e04833640718d7818dcf3dc"}, {0x98, 0x116, 0x475, "60388ed96772fd02a7f3388a6a68079472d64219b1de72d0424e41511130f818ee351bf6cfd8fa396ffc3aa7d8f092a54efa4bdeca6d22ba23a4d958c5468d5a5301f8ee949b87185f30e89b7b3f6aaec21040c449b3207d21c972e4972253f64e16101cb5b049a3e598e58ca8b11803c7353d0a029f03a2aa326f8bb8b2de3091c06a8bf2a30fa5"}, {0x20, 0x113, 0x9, "cbe77a1582722e465595"}], 0xe20}, 0x48810) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000940), &(0x7f00000001c0), 0x401, r0}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 1.907691241s ago: executing program 9 (id=8378): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.826966255s ago: executing program 4 (id=8380): ioperm(0x7, 0x81, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x578410eb) sendfile(r2, r0, 0x0, 0x100000000) 1.779124578s ago: executing program 1 (id=8381): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8060) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x11001}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0xf000}, 0x8) 1.3500819s ago: executing program 1 (id=8382): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.183795458s ago: executing program 9 (id=8383): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x5e29ee14, 0x4) 1.166783979s ago: executing program 1 (id=8384): socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$kcm(0xa, 0x1, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 1.099303663s ago: executing program 1 (id=8385): openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x14100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000380)={0x1, 'vlan0\x00', {}, 0x133}) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x5, 0x4400, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x5e801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x40}}, 0x440088c4) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 937.660361ms ago: executing program 3 (id=8387): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 937.173891ms ago: executing program 4 (id=8388): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) lseek(r1, 0x25, 0x4) 842.528156ms ago: executing program 1 (id=8389): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000943000/0x4000)=nil, 0x4000, 0x3000002, 0x4031, 0xffffffffffffffff, 0x95063000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 805.635338ms ago: executing program 3 (id=8390): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x10) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) 704.098533ms ago: executing program 3 (id=8391): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) 700.970554ms ago: executing program 3 (id=8392): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000000), 0x0, 0x2, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 483.975135ms ago: executing program 1 (id=8393): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0xa, 0x4e24, 0x5, @local, 0x3b67}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8848) setresuid(0x0, 0x0, 0x0) set_mempolicy(0x2, 0x0, 0x4) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 483.453055ms ago: executing program 3 (id=8403): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x188000, 0x85) lseek(r2, 0x1d, 0x1) 392.13786ms ago: executing program 3 (id=8394): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 349.082632ms ago: executing program 4 (id=8395): connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_bpf={{0x8}, {0x54, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_FD={0x8}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0xffffffffffffffff, 0x9, 0x401, 0x9, {0x5, 0xf138afa0fc5938f6, 0x0, 0x6, 0x81}, {0xe, 0x0, 0xc, 0x6, 0x4, 0x3}, 0x6000000, 0x4, 0x23}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x40815}, 0x40) 213.854299ms ago: executing program 4 (id=8396): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 202.57794ms ago: executing program 9 (id=8397): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000000380)={0x228, 0x8000000000000001, 0x0, 0x7}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) 112.045374ms ago: executing program 4 (id=8398): recvmmsg(0xffffffffffffffff, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000002640)=[{0x0}, {&(0x7f0000001440)=""/100, 0x64}], 0x1000000000000053}, 0xfffe}], 0x1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4095, 0xfff}], 0x1}}], 0x1, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x0, 0x0) 0s ago: executing program 2 (id=8399): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [], {0x95, 0x0, 0xc00}}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a50000000060a010400000000000000000a0000010900010073797a310000000024000480200001800700010063740000140002800800014000000001080002400000000a0900020073797a320000000014000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): ed blocking state [ 505.424887][T28223] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.450918][T28223] bridge_slave_0: entered allmulticast mode [ 505.466757][T28223] bridge_slave_0: entered promiscuous mode [ 505.507929][ T3042] 8021q: adding VLAN 0 to HW filter on device eth6 [ 505.525114][T28223] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.545601][T28223] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.559562][T28223] bridge_slave_1: entered allmulticast mode [ 505.571932][T28223] bridge_slave_1: entered promiscuous mode [ 505.628361][T28223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.649632][T28223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.726780][ T9079] bridge_slave_1: left allmulticast mode [ 505.740334][ T9079] bridge_slave_1: left promiscuous mode [ 505.754713][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.782071][ T9079] bridge_slave_0: left allmulticast mode [ 505.793645][ T9079] bridge_slave_0: left promiscuous mode [ 505.818139][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.844935][ T9079] bridge_slave_1: left allmulticast mode [ 505.861209][ T9079] bridge_slave_1: left promiscuous mode [ 505.875928][ T9079] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.890363][ T9079] bridge_slave_0: left allmulticast mode [ 505.896215][ T9079] bridge_slave_0: left promiscuous mode [ 505.903862][ T9079] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.016272][ T28] audit: type=1400 audit(1776547194.638:1597): avc: denied { read } for pid=28335 comm="syz.4.6731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 506.037289][ T3436] delete_channel: no stack [ 506.111220][T28345] netlink: 'syz.4.6734': attribute type 39 has an invalid length. [ 506.135346][ T9079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.156686][ T9079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.168582][ T9079] bond0 (unregistering): Released all slaves [ 506.178472][ T9079] bond1 (unregistering): (slave lo): Releasing backup interface [ 506.186725][ T9079] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 506.198099][ T9079] bond1 (unregistering): Released all slaves [ 506.275204][ T9079] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.285911][ T9079] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.295905][ T9079] bond0 (unregistering): Released all slaves [ 506.364841][T28223] team0: Port device team_slave_0 added [ 506.371668][T28223] team0: Port device team_slave_1 added [ 506.378039][ T3042] 8021q: adding VLAN 0 to HW filter on device eth7 [ 506.416923][ T9079] hsr_slave_0: left promiscuous mode [ 506.422989][ T9079] hsr_slave_1: left promiscuous mode [ 506.428746][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.436460][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.445185][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.453430][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.466007][ T9079] hsr_slave_0: left promiscuous mode [ 506.474156][ T9079] hsr_slave_1: left promiscuous mode [ 506.479953][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.487550][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.495818][ T9079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.518039][ T9079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.533692][ T9079] veth1_macvtap: left promiscuous mode [ 506.539268][ T9079] veth0_macvtap: left promiscuous mode [ 506.544979][ T9079] veth1_vlan: left promiscuous mode [ 506.550975][ T9079] veth1_macvtap: left promiscuous mode [ 506.556689][ T9079] veth0_macvtap: left promiscuous mode [ 506.563756][ T9079] veth1_vlan: left promiscuous mode [ 506.569040][ T9079] veth0_vlan: left promiscuous mode [ 506.679928][ T9079] team0 (unregistering): Port device team_slave_1 removed [ 506.690436][ T9079] team0 (unregistering): Port device team_slave_0 removed [ 506.756282][ T9079] team0 (unregistering): Port device team_slave_1 removed [ 506.766348][ T9079] team0 (unregistering): Port device team_slave_0 removed [ 506.804149][T28223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.811152][T28223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.837208][T28223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.848632][T28223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.855937][T28223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 506.882091][T28223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.939850][T28223] hsr_slave_0: entered promiscuous mode [ 506.955677][T28223] hsr_slave_1: entered promiscuous mode [ 506.961457][T28363] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6742'. [ 506.970873][T28223] debugfs: 'hsr0' already exists in 'hsr' [ 506.977942][T28223] Cannot create hsr debugfs directory [ 507.091202][ T3042] 8021q: adding VLAN 0 to HW filter on device eth10 [ 507.155231][T28303] chnl_net:caif_netlink_parms(): no params data found [ 507.272549][T28303] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.287928][T28303] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.296751][T28303] bridge_slave_0: entered allmulticast mode [ 507.303682][T28303] bridge_slave_0: entered promiscuous mode [ 507.317893][T28303] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.326421][T28303] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.338077][T28303] bridge_slave_1: entered allmulticast mode [ 507.345632][T28303] bridge_slave_1: entered promiscuous mode [ 507.399343][T28303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.416348][ T9079] IPVS: stop unused estimator thread 0... [ 507.437921][T28303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.513206][T28303] team0: Port device team_slave_0 added [ 507.529735][T28303] team0: Port device team_slave_1 added [ 507.596009][T28303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.607637][T28303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.636346][T28303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.649125][T28223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 507.667814][T28223] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 507.684919][T28303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.698307][T28420] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 507.698785][T28303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.746852][T28303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.773628][T28223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 507.787753][T28223] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 507.823534][T28223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 507.833846][T28223] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 507.850262][T28223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 507.868967][T28223] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.885436][T28303] hsr_slave_0: entered promiscuous mode [ 507.894196][T28303] hsr_slave_1: entered promiscuous mode [ 507.902101][T28303] debugfs: 'hsr0' already exists in 'hsr' [ 507.914682][T28303] Cannot create hsr debugfs directory [ 508.082883][T28303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.102043][T28303] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.127212][T28223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.141779][T28223] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.156878][ T9092] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.164012][ T9092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.179455][T28303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.200305][T28303] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.221238][ T9092] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.228353][ T9092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.266587][T28303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.277340][T28303] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.342299][T28303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.365022][T28303] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.450761][T28223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.470975][T28471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 508.485798][T28471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.514362][T28476] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6751'. [ 508.532852][T28476] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6751'. [ 508.583501][T28303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 508.600516][T28303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 508.622168][T28303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 508.634088][T28303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 508.650337][T28303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 508.668800][T28303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 508.682785][T28303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 508.708168][T28303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 508.764966][T28509] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6755'. [ 508.803043][T28223] veth0_vlan: entered promiscuous mode [ 508.823043][T28303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.836210][T28223] veth1_vlan: entered promiscuous mode [ 508.849169][T28303] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.868095][ T9079] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.875385][ T9079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.897799][T28223] veth0_macvtap: entered promiscuous mode [ 508.907564][ T9079] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.914719][ T9079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.927655][T28223] veth1_macvtap: entered promiscuous mode [ 508.963861][T28223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.982447][T28223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.000385][ T9078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.017381][ T9078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.031701][ T9073] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.043779][ T9073] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.155574][T28303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.261518][T28551] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6758'. [ 509.298880][T28303] veth0_vlan: entered promiscuous mode [ 509.307240][T28303] veth1_vlan: entered promiscuous mode [ 509.323824][T28303] veth0_macvtap: entered promiscuous mode [ 509.331372][T28303] veth1_macvtap: entered promiscuous mode [ 509.344040][T28303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 509.355849][T28303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.367472][ T9073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.381829][ T9073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.405190][ T9073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.418606][ T9073] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.437692][ T28] audit: type=1400 audit(1776547198.068:1598): avc: denied { write } for pid=28303 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 509.471584][ T28] audit: type=1400 audit(1776547198.068:1599): avc: denied { open } for pid=28303 comm="syz-executor" path="/syzcgroup/cpu/syz3/cgroup.procs" dev="cgroup" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 509.509151][T28555] lo speed is unknown, defaulting to 1000 [ 509.516665][T28555] lo speed is unknown, defaulting to 1000 [ 509.531777][T28555] lo speed is unknown, defaulting to 1000 [ 509.632047][T28555] infiniband lyz2: set active [ 509.636990][T27494] lo speed is unknown, defaulting to 1000 [ 509.647027][T28555] infiniband lyz2: added lo [ 509.681172][T28555] RDS/IB: lyz2: added [ 509.701011][T28555] smc: adding ib device lyz2 with port count 1 [ 509.716394][T28555] smc: ib device lyz2 port 1 has no pnetid [ 509.729775][T27494] lo speed is unknown, defaulting to 1000 [ 509.742686][T28555] lo speed is unknown, defaulting to 1000 [ 509.897451][T28555] lo speed is unknown, defaulting to 1000 [ 509.982583][T28576] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6768'. [ 509.986344][T28555] lo speed is unknown, defaulting to 1000 [ 510.025338][T28576] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6768'. [ 510.042104][T28576] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6768'. [ 510.108451][T28555] lo speed is unknown, defaulting to 1000 [ 510.161177][T28555] lo speed is unknown, defaulting to 1000 [ 510.214992][T28555] lo speed is unknown, defaulting to 1000 [ 510.273682][T28555] lo speed is unknown, defaulting to 1000 [ 510.378771][T28555] lo speed is unknown, defaulting to 1000 [ 510.438674][T28555] lo speed is unknown, defaulting to 1000 [ 510.562735][T28610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6780'. [ 510.576036][T28610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6780'. [ 510.780160][ T28] audit: type=1326 audit(1776547199.408:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28632 comm="syz.1.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 510.808743][T28628] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6785'. [ 510.849430][ T28] audit: type=1326 audit(1776547199.438:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28632 comm="syz.1.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 510.887240][T28635] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 510.901104][ T28] audit: type=1326 audit(1776547199.438:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28632 comm="syz.1.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 510.926545][ T28] audit: type=1326 audit(1776547199.438:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28632 comm="syz.1.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 510.983424][ T28] audit: type=1326 audit(1776547199.438:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28632 comm="syz.1.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 511.007911][ T28] audit: type=1326 audit(1776547199.438:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28632 comm="syz.1.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 511.032751][ T28] audit: type=1326 audit(1776547199.438:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28632 comm="syz.1.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 511.059061][T28635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.067720][ T28] audit: type=1326 audit(1776547199.438:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28632 comm="syz.1.6787" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 511.092987][T28635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.115225][T28635] bond0 (unregistering): Released all slaves [ 511.149512][T28647] loop1: detected capacity change from 0 to 8192 [ 511.240666][T28654] netlink: 'syz.3.6794': attribute type 27 has an invalid length. [ 511.334872][T28654] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.342198][T28654] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.425702][T28654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 511.436569][T28654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 511.471165][ T3436] lo speed is unknown, defaulting to 1000 [ 511.489742][T28667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 511.498130][T28667] 8021q: adding VLAN 0 to HW filter on device team0 [ 511.513421][T28667] net_ratelimit: 3322 callbacks suppressed [ 511.513433][T28667] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 511.539911][T28685] ref_ctr_offset mismatch. inode: 0x178d offset: 0x0 ref_ctr_offset(old): 0x200000000000 ref_ctr_offset(new): 0x0 [ 511.554537][ T9073] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.580732][ T9073] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.598136][T22817] lo speed is unknown, defaulting to 1000 [ 511.607397][ T9073] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.618828][ T9073] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.637847][ T3436] lo speed is unknown, defaulting to 1000 [ 511.688511][T28698] netlink: 'syz.3.6806': attribute type 5 has an invalid length. [ 511.702786][T28698] geneve2: entered promiscuous mode [ 511.708236][T28698] geneve2: entered allmulticast mode [ 511.715457][ T9073] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 511.729636][ T9073] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 511.739196][ T9073] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 511.748092][ T9092] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 511.918663][T28722] ref_ctr_offset mismatch. inode: 0x3c offset: 0x0 ref_ctr_offset(old): 0x14 ref_ctr_offset(new): 0x0 [ 512.131459][T28720] loop4: detected capacity change from 0 to 256 [ 512.231045][T28731] netlink: 'syz.4.6817': attribute type 27 has an invalid length. [ 512.346235][T28731] gtp0: left promiscuous mode [ 512.354691][T28731] team1: left promiscuous mode [ 512.359565][T28731] team1: left allmulticast mode [ 512.385961][T28738] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.397274][T28738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 512.428549][ T9079] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.445815][ T9079] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.472311][ T9079] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.481750][ T9079] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.505209][ T9079] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.514803][ T9079] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.527564][ T9079] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.545677][ T9079] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.527300][T28829] __nla_validate_parse: 10 callbacks suppressed [ 513.527334][T28829] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6831'. [ 513.799152][T28835] loop1: detected capacity change from 0 to 512 [ 513.831235][T28835] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.6834: corrupted in-inode xattr: overlapping e_value [ 513.849266][T28835] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 513.851895][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 513.867559][ C1] EXT4-fs (loop1): initial error at time 1776547202: ext4_iget_extra_inode:5128: inode 15 [ 513.877602][ C1] EXT4-fs (loop1): last error at time 1776547202: ext4_iget_extra_inode:5128: inode 15 [ 513.892107][T28835] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6834: couldn't read orphan inode 15 (err -117) [ 513.936192][T28848] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6838'. [ 513.949188][ T157] nci: nci_ntf_packet: unknown ntf opcode 0x26 [ 513.964955][T28835] loop1: lost filesystem error report for type 5 error -117 [ 513.965590][T28835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.059752][T28862] netlink: 'syz.9.6844': attribute type 10 has an invalid length. [ 514.102706][T28862] netlink: 'syz.9.6844': attribute type 10 has an invalid length. [ 514.138702][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.237820][T28874] lo speed is unknown, defaulting to 1000 [ 514.473729][T28884] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6854'. [ 514.489592][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6855'. [ 514.512067][T28888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6855'. [ 514.653435][T28841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 514.709473][T28899] lo speed is unknown, defaulting to 1000 [ 514.870259][T28912] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6867'. [ 514.876288][T28914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6868'. [ 514.912824][T28916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6869'. [ 514.938907][T28916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6869'. [ 514.965829][ T9073] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 514.991636][ T9073] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.011680][ T9073] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.039667][ T9073] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.232669][T28934] loop1: detected capacity change from 0 to 2048 [ 515.271102][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 515.271120][ T28] audit: type=1326 audit(1776547203.898:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28935 comm="syz.2.6877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0b294fc819 code=0x0 [ 515.319056][T28934] loop1: p2 p3 p7 [ 515.331146][ T28] audit: type=1400 audit(1776547203.958:1619): avc: denied { read } for pid=28933 comm="syz.1.6876" name="loop1p2" dev="devtmpfs" ino=1816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 515.363366][ T28] audit: type=1400 audit(1776547203.958:1620): avc: denied { open } for pid=28933 comm="syz.1.6876" path="/dev/loop1p2" dev="devtmpfs" ino=1816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 515.452276][T21827] udevd[21827]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 515.456905][T21875] udevd[21875]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 515.479401][T24222] udevd[24222]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 515.553972][T28950] rdma_rxe: rxe_newlink: failed to add lo [ 515.560270][T28947] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6881'. [ 515.732920][ T157] bridge_slave_1: left allmulticast mode [ 515.738709][ T157] bridge_slave_1: left promiscuous mode [ 515.744557][ T157] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.752550][ T157] bridge_slave_0: left allmulticast mode [ 515.758389][ T157] bridge_slave_0: left promiscuous mode [ 515.764371][ T157] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.825657][ T157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.837919][ T157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.847997][ T157] bond0 (unregistering): Released all slaves [ 515.878453][T28955] netlink: 'syz.9.6893': attribute type 39 has an invalid length. [ 515.993019][T28970] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 516.050998][T28977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.063235][T28977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.077661][T28977] bond0 (unregistering): Released all slaves [ 516.112021][ T157] hsr_slave_0: left promiscuous mode [ 516.122864][ T157] hsr_slave_1: left promiscuous mode [ 516.143140][ T157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 516.157735][ T157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.208125][T28997] sctp: [Deprecated]: syz.2.6892 (pid 28997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 516.208125][T28997] Use struct sctp_sack_info instead [ 516.232835][T28984] loop3: detected capacity change from 0 to 8192 [ 516.252668][ T157] team0 (unregistering): Port device team_slave_1 removed [ 516.270641][ T157] team0 (unregistering): Port device team_slave_0 removed [ 516.360568][ T9] syz1: Port: 1 Link DOWN [ 516.363823][ T3042] 8021q: adding VLAN 0 to HW filter on device eth5 [ 516.482907][T29012] lo speed is unknown, defaulting to 1000 [ 516.649065][ T157] IPVS: stop unused estimator thread 0... [ 516.727460][ T3042] 8021q: adding VLAN 0 to HW filter on device eth6 [ 516.802952][T29058] loop4: detected capacity change from 0 to 512 [ 516.832429][T29058] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 516.896360][T29058] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 516.936952][T29058] ext4 filesystem being mounted at /317/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 517.097312][T21819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.338852][ T3042] 8021q: adding VLAN 0 to HW filter on device eth7 [ 517.352020][ T28] audit: type=1400 audit(1776547205.978:1621): avc: denied { mounton } for pid=29125 comm="syz.2.6912" path="/file0" dev="ramfs" ino=91022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 517.398130][ T28] audit: type=1400 audit(1776547206.008:1622): avc: denied { read } for pid=29127 comm="syz.4.6913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 517.424867][ T28] audit: type=1400 audit(1776547206.058:1623): avc: denied { watch watch_reads } for pid=29133 comm="syz.9.6915" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 517.665119][T29156] netlink: 'syz.2.6920': attribute type 1 has an invalid length. [ 517.736030][ T3042] 8021q: adding VLAN 0 to HW filter on device eth10 [ 518.026056][T29171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.089061][T29174] erspan0: entered promiscuous mode [ 518.534048][T29189] loop4: detected capacity change from 0 to 128 [ 518.544005][T29191] __nla_validate_parse: 2 callbacks suppressed [ 518.544023][T29191] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6931'. [ 518.559536][T29191] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6931'. [ 518.572303][T29189] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 518.598468][T29189] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 518.663547][ T9093] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 519.050449][T29204] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6937'. [ 519.254045][T29211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6940'. [ 519.265788][T29211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6940'. [ 519.315134][T29214] loop4: detected capacity change from 0 to 164 [ 519.338723][T29214] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 519.646801][ T28] audit: type=1400 audit(1776547208.278:1624): avc: denied { module_load } for pid=29237 comm="syz.4.6949" path="/file1" dev="ramfs" ino=91356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=system permissive=1 [ 519.646830][T29238] Invalid ELF header len 9 [ 519.674732][T29236] loop1: detected capacity change from 0 to 1024 [ 519.682678][T29236] EXT4-fs: Ignoring removed bh option [ 519.708906][T29236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 519.752286][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.991907][T29255] loop4: detected capacity change from 0 to 256 [ 520.013720][T29255] FAT-fs (loop4): Directory bread(block 64) failed [ 520.023152][T29255] FAT-fs (loop4): Directory bread(block 65) failed [ 520.029849][T29255] FAT-fs (loop4): Directory bread(block 66) failed [ 520.036650][T29255] FAT-fs (loop4): Directory bread(block 67) failed [ 520.043445][T29255] FAT-fs (loop4): Directory bread(block 68) failed [ 520.053778][T29255] FAT-fs (loop4): Directory bread(block 69) failed [ 520.067416][T29255] FAT-fs (loop4): Directory bread(block 70) failed [ 520.093560][T29255] FAT-fs (loop4): Directory bread(block 71) failed [ 520.103944][T29255] FAT-fs (loop4): Directory bread(block 72) failed [ 520.110681][T29255] FAT-fs (loop4): Directory bread(block 73) failed [ 520.235061][T29255] syz.4.6955: attempt to access beyond end of device [ 520.235061][T29255] loop4: rw=2049, sector=1224, nr_sectors = 4 limit=256 [ 520.730161][T29279] netlink: 'syz.4.6966': attribute type 1 has an invalid length. [ 520.870029][ T28] audit: type=1400 audit(1776547209.498:1625): avc: denied { sys_admin } for pid=29292 comm="syz.1.6970" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 521.365857][T29312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.637630][T29320] ip6gre1: entered promiscuous mode [ 521.653618][T29320] ip6gre1: entered allmulticast mode [ 521.774214][ T3436] kernel write not supported for file bpf-prog (pid: 3436 comm: kworker/1:7) [ 522.369082][T29342] lo speed is unknown, defaulting to 1000 [ 522.794488][T29382] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7002'. [ 523.433477][T29392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7007'. [ 523.461629][T29397] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7009'. [ 523.527295][T29403] netlink: 'syz.4.7012': attribute type 6 has an invalid length. [ 523.598394][T29405] loop3: detected capacity change from 0 to 1024 [ 523.605085][T29405] EXT4-fs: inline encryption not supported [ 523.611011][T29405] EXT4-fs: Ignoring removed bh option [ 523.616547][T29405] EXT4-fs: Ignoring removed nobh option [ 523.639558][T29405] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.709019][T29411] netlink: 'syz.4.7023': attribute type 16 has an invalid length. [ 523.727342][T29411] netlink: 'syz.4.7023': attribute type 17 has an invalid length. [ 524.325031][T28303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.685816][T29411] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.719713][T29421] sch_fq: defrate 0 ignored. [ 524.771683][T29425] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7018'. [ 524.794032][T29425] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7018'. [ 524.905021][T29436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7022'. [ 525.117799][T29450] netlink: 'syz.1.7028': attribute type 4 has an invalid length. [ 525.159479][T29450] netlink: 'syz.1.7028': attribute type 4 has an invalid length. [ 525.239430][T29452] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7029'. [ 525.493070][T29472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7038'. [ 525.561401][T29481] loop3: detected capacity change from 0 to 1764 [ 525.574214][T29481] iso9660: Unknown parameter 'i' [ 525.585474][T29481] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7041'. [ 525.617817][T29483] loop3: detected capacity change from 0 to 1024 [ 525.625186][T29483] EXT4-fs: Ignoring removed bh option [ 525.655966][T29483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 525.756396][T28303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.862544][ T9093] vlan0: left promiscuous mode [ 525.872385][ T9093] bridge0: port 3(vlan0) entered disabled state [ 525.904624][ T9093] bridge_slave_0: left promiscuous mode [ 525.918467][ T9093] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.926587][ T28] audit: type=1400 audit(1776547214.558:1626): avc: denied { ioctl } for pid=29502 comm="syz.9.7059" path="socket:[92836]" dev="sockfs" ino=92836 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.046980][ T9093] bond2 (unregistering): (slave geneve2): Releasing active interface [ 526.115774][T29520] netlink: 'syz.9.7055': attribute type 1 has an invalid length. [ 526.204100][ T9093] bond5 (unregistering): (slave bridge1): Releasing active interface [ 526.574814][ T9093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.585733][ T9093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.658320][ T9093] bond0 (unregistering): Released all slaves [ 526.668327][ T9093] bond1 (unregistering): Released all slaves [ 526.678394][ T9093] bond2 (unregistering): Released all slaves [ 526.689210][ T9093] bond3 (unregistering): (slave bond4): Releasing backup interface [ 526.706512][ T9093] bond4 (unregistering): left promiscuous mode [ 526.721027][ T9093] bond3 (unregistering): Released all slaves [ 526.740301][ T9093] bond4 (unregistering): Released all slaves [ 526.750547][ T9093] bond5 (unregistering): Released all slaves [ 526.793167][T29537] lo speed is unknown, defaulting to 1000 [ 526.913554][ T9093] hsr_slave_0: left promiscuous mode [ 526.932662][ T9093] hsr_slave_1: left promiscuous mode [ 526.951083][ T9093] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.969580][ T28] audit: type=1400 audit(1776547215.598:1627): avc: denied { watch } for pid=29553 comm="syz.2.7069" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 526.990809][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.011231][ T9093] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.030470][ T9093] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.253674][ T9093] team0 (unregistering): Port device team_slave_1 removed [ 527.284344][ T9093] team0 (unregistering): Port device team_slave_0 removed [ 527.346066][T29572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 527.410521][T29577] uprobe: syz.1.7079:29577 failed to unregister, leaking uprobe [ 527.578761][ T9093] IPVS: stop unused estimator thread 0... [ 527.596767][ T28] audit: type=1400 audit(1776547216.228:1628): avc: denied { lock } for pid=29605 comm="syz.9.7085" path="socket:[92936]" dev="sockfs" ino=92936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 527.677150][T29611] netlink: 'syz.4.7087': attribute type 1 has an invalid length. [ 527.780097][T29609] lo speed is unknown, defaulting to 1000 [ 531.228029][ T28] audit: type=1326 audit(1776547219.858:1629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.260192][ T28] audit: type=1326 audit(1776547219.888:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.300450][ T28] audit: type=1326 audit(1776547219.888:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.331929][ T28] audit: type=1326 audit(1776547219.888:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.356006][ T28] audit: type=1326 audit(1776547219.888:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.379614][ T28] audit: type=1326 audit(1776547219.888:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.405622][ T28] audit: type=1326 audit(1776547219.888:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.430609][ T28] audit: type=1326 audit(1776547219.888:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.476731][ T28] audit: type=1326 audit(1776547219.888:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.508333][ T28] audit: type=1326 audit(1776547219.888:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29726 comm="syz.2.7115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b294fc819 code=0x7ffc0000 [ 531.991665][T29780] loop4: detected capacity change from 0 to 512 [ 532.042161][T29780] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.7134: inode has both inline data and extents flags [ 532.120492][T29780] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 532.121325][T29780] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.7134: couldn't read orphan inode 15 (err -117) [ 532.130646][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 532.130669][ C1] EXT4-fs (loop4): initial error at time 1776547220: ext4_orphan_get:1397: inode 15 [ 532.130702][ C1] EXT4-fs (loop4): last error at time 1776547220: ext4_orphan_get:1397: inode 15 [ 532.177956][T29780] loop4: lost filesystem error report for type 5 error -117 [ 532.180086][T29780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.214924][T21819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.404176][T29809] netlink: 'syz.1.7137': attribute type 5 has an invalid length. [ 532.778286][T29828] lo speed is unknown, defaulting to 1000 [ 533.378936][T29842] netlink: 'syz.9.7146': attribute type 16 has an invalid length. [ 533.387131][T29842] netlink: 'syz.9.7146': attribute type 17 has an invalid length. [ 533.429662][T29842] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 533.584254][T29850] bridge_slave_1: left allmulticast mode [ 533.589990][T29850] bridge_slave_1: left promiscuous mode [ 533.595736][T29850] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.645269][T29850] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 533.772813][T29862] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7156'. [ 534.654231][T29887] erspan0: entered allmulticast mode [ 535.734807][T29930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7184'. [ 536.070032][T29942] loop4: detected capacity change from 0 to 512 [ 536.114798][T29942] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 536.124695][T29942] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 536.133753][T29942] EXT4-fs (loop4): The Hurd can't support 64-bit file systems [ 536.163414][T29942] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7189'. [ 536.338319][ T28] kauditd_printk_skb: 46 callbacks suppressed [ 536.338337][ T28] audit: type=1400 audit(1776547224.968:1685): avc: denied { read } for pid=29951 comm="syz.4.7194" path="socket:[93430]" dev="sockfs" ino=93430 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 536.494337][T29972] netlink: 13 bytes leftover after parsing attributes in process `syz.4.7201'. [ 536.509360][T29976] netlink: 'syz.1.7205': attribute type 4 has an invalid length. [ 536.519313][T29976] netlink: 'syz.1.7205': attribute type 4 has an invalid length. [ 536.565813][ T28] audit: type=1400 audit(1776547225.198:1686): avc: denied { map } for pid=29977 comm="syz.2.7206" path="socket:[93473]" dev="sockfs" ino=93473 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 536.640861][T29988] loop4: detected capacity change from 0 to 512 [ 536.662943][T29988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 536.685058][T29988] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.7210: iget: bad i_size value: 38620345925642 [ 536.708042][T29988] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 536.711888][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 536.727516][ C1] EXT4-fs (loop4): initial error at time 1776547225: ext4_orphan_get:1397: inode 15 [ 536.736975][ C1] EXT4-fs (loop4): last error at time 1776547225: ext4_orphan_get:1397: inode 15 [ 536.746452][T29988] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.7210: couldn't read orphan inode 15 (err -117) [ 536.766399][T29988] loop4: lost filesystem error report for type 5 error -117 [ 536.767092][T29988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.843756][T29991] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 536.920023][T30005] loop1: detected capacity change from 0 to 512 [ 536.960253][T30005] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.7217: bg 0: block 4: invalid block bitmap [ 537.002857][T30005] loop1: lost filesystem error report for type 5 error -117 [ 537.002994][T21819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.011954][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 537.025844][ C1] EXT4-fs (loop1): initial error at time 1776547225: ext4_validate_block_bitmap:432 [ 537.035325][ C1] EXT4-fs (loop1): last error at time 1776547225: ext4_validate_block_bitmap:432 [ 537.038000][T30005] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 537.071943][T30005] loop1: lost filesystem error report for type 5 error -117 [ 537.073355][T30005] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.7217: invalid indirect mapped block 1 (level 1) [ 537.113933][T30005] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 537.114245][T30005] EXT4-fs (loop1): 1 truncate cleaned up [ 537.156493][T30005] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.202542][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.278241][ T28] audit: type=1400 audit(1776547225.908:1687): avc: denied { append } for pid=30025 comm="syz.1.7222" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 537.354457][T30029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7224'. [ 537.387243][T30029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7224'. [ 537.679348][T30044] lo speed is unknown, defaulting to 1000 [ 537.829227][ T10] IPVS: starting estimator thread 0... [ 537.922271][T30058] IPVS: using max 2208 ests per chain, 110400 per kthread [ 538.121101][T30071] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 539.827938][T30158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7275'. [ 539.986332][T30168] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7279'. [ 541.021528][T30210] loop3: detected capacity change from 0 to 164 [ 541.038073][T30210] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 541.137061][T30221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7299'. [ 541.174361][T30221] bond0: entered promiscuous mode [ 541.183913][T30221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.203494][T30221] bridge1: entered promiscuous mode [ 541.210786][T30221] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 541.227219][T30221] bond0: left promiscuous mode [ 541.234719][T30221] bridge1: left promiscuous mode [ 541.240380][T30228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7302'. [ 541.244096][T30221] bond0: entered allmulticast mode [ 541.262163][T30221] bridge1: entered allmulticast mode [ 541.531509][T30236] loop1: detected capacity change from 0 to 512 [ 541.553724][T30236] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 541.589822][T30236] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.7305: iget: bad i_size value: 38620345925642 [ 541.612842][T30236] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 541.614493][T30236] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.7305: couldn't read orphan inode 15 (err -117) [ 541.623674][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 541.623689][ C0] EXT4-fs (loop1): initial error at time 1776547486: ext4_orphan_get:1397: inode 15 [ 541.623722][ C0] EXT4-fs (loop1): last error at time 1776547486: ext4_orphan_get:1397: inode 15 [ 541.648244][T30243] netlink: 'syz.3.7306': attribute type 16 has an invalid length. [ 541.651632][T30236] loop1: lost filesystem error report for type 5 error -117 [ 541.672340][T30236] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 541.778026][T30243] netlink: 'syz.3.7306': attribute type 17 has an invalid length. [ 541.818924][T30243] erspan0: left promiscuous mode [ 541.837377][ T9083] Bluetooth: hci0: Frame reassembly failed (-84) [ 541.859354][T30243] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.985254][T30271] netlink: 'syz.4.7315': attribute type 3 has an invalid length. [ 542.003508][T30271] netlink: 'syz.4.7315': attribute type 7 has an invalid length. [ 542.017791][T30271] netlink: 198320 bytes leftover after parsing attributes in process `syz.4.7315'. [ 542.155489][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.295798][T30287] netlink: 'syz.3.7323': attribute type 7 has an invalid length. [ 542.303636][T30287] netlink: 'syz.3.7323': attribute type 8 has an invalid length. [ 542.342331][T30291] loop3: detected capacity change from 0 to 512 [ 542.352773][T30291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 542.385562][T30291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.415354][T30291] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 542.522410][T28303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.616437][T30303] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7329'. [ 542.737109][T30307] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7331'. [ 543.469705][T30329] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7340'. [ 543.484238][T30329] unsupported nlmsg_type 40 [ 543.842033][T23436] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 543.941022][T30353] netlink: 'syz.9.7350': attribute type 4 has an invalid length. [ 544.896169][T30397] lo speed is unknown, defaulting to 1000 [ 544.934325][ T28] audit: type=1400 audit(1776547489.564:1688): avc: denied { unmount } for pid=30396 comm="syz.9.7365" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 545.288195][T30428] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7386'. [ 545.302937][T30428] bond9: entered promiscuous mode [ 545.308181][T30428] 8021q: adding VLAN 0 to HW filter on device bond9 [ 545.325293][T30428] bridge5: entered promiscuous mode [ 545.331320][T30428] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 545.345896][T30428] bond9: left promiscuous mode [ 545.350955][T30428] bridge5: left promiscuous mode [ 545.356270][T30428] bond9: entered allmulticast mode [ 545.361518][T30428] bridge5: entered allmulticast mode [ 545.477661][ T28] audit: type=1326 audit(1776547490.104:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.3.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 545.521502][ T28] audit: type=1326 audit(1776547490.124:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.3.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 545.566322][ T28] audit: type=1326 audit(1776547490.124:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.3.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 545.600058][ T28] audit: type=1326 audit(1776547490.124:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.3.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 545.641898][ T28] audit: type=1326 audit(1776547490.134:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.3.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 545.685549][T30447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.732179][T30447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.740235][ T28] audit: type=1326 audit(1776547490.184:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.3.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 545.768665][ T28] audit: type=1326 audit(1776547490.184:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.3.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 545.792679][ T28] audit: type=1326 audit(1776547490.184:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.3.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 545.826624][ T28] audit: type=1326 audit(1776547490.184:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30436 comm="syz.3.7379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 545.899561][T30458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7389'. [ 545.913730][T30458] bond0: entered promiscuous mode [ 545.919000][T30458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.938093][T30458] bridge2: entered promiscuous mode [ 545.944116][T30458] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 545.961484][T30458] bond0: left promiscuous mode [ 545.966504][T30458] bridge2: left promiscuous mode [ 545.971562][T30458] bond0: entered allmulticast mode [ 545.976759][T30458] bridge2: entered allmulticast mode [ 546.277868][T30481] loop4: detected capacity change from 0 to 1024 [ 546.289060][T30481] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 546.301240][T30481] System zones: 0-1, 3-36 [ 546.317081][T30481] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.7399: bad orphan inode 134217728 [ 546.368062][T30481] loop4: lost filesystem error report for type 5 error -117 [ 546.376274][T30481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.425485][T30489] netlink: 'syz.2.7401': attribute type 4 has an invalid length. [ 546.464862][T30489] netlink: 'syz.2.7401': attribute type 4 has an invalid length. [ 546.609535][T30489] bridge0: port 3(syz_tun) entered disabled state [ 546.655689][T21819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.765544][T30517] lo speed is unknown, defaulting to 1000 [ 546.878002][T30523] lo speed is unknown, defaulting to 1000 [ 548.225838][T30638] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.7422'. [ 548.238353][T30638] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7422'. [ 548.818668][T30681] syzkaller1: entered promiscuous mode [ 548.831230][T30681] syzkaller1: entered allmulticast mode [ 548.886258][T30687] netlink: 'syz.1.7434': attribute type 4 has an invalid length. [ 548.941232][T30689] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7435'. [ 549.092471][T30699] syzkaller0: entered promiscuous mode [ 549.103799][T30699] syzkaller0: entered allmulticast mode [ 549.310961][T30723] loop4: detected capacity change from 0 to 256 [ 549.321359][T30723] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 549.366190][T30723] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 549.935141][T30743] loop3: detected capacity change from 0 to 1024 [ 549.974166][T30743] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 550.003634][T30743] System zones: 0-1, 3-36 [ 550.029875][T30743] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.7458: bad orphan inode 134217728 [ 550.087085][T30743] loop3: lost filesystem error report for type 5 error -117 [ 550.091472][T30743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.255147][T30762] loop1: detected capacity change from 0 to 1024 [ 550.281386][T30762] EXT4-fs: Ignoring removed bh option [ 550.291670][T28303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.323747][T30762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.831004][T30776] netlink: 'syz.9.7470': attribute type 8 has an invalid length. [ 550.838893][T30776] netlink: 'syz.9.7470': attribute type 7 has an invalid length. [ 550.846957][T30776] netlink: 194488 bytes leftover after parsing attributes in process `syz.9.7470'. [ 550.960784][T30778] netlink: 116 bytes leftover after parsing attributes in process `syz.9.7471'. [ 550.988837][T30780] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=30780 comm=syz.9.7472 [ 551.001970][T30780] netlink: 1175 bytes leftover after parsing attributes in process `syz.9.7472'. [ 551.183260][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.817087][T14101] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 551.826373][T14101] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 551.881705][T30829] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7489'. [ 551.891359][T30829] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7489'. [ 552.451492][T30853] loop1: detected capacity change from 0 to 1024 [ 552.468186][T30853] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 552.485522][T30853] System zones: 0-1, 3-36 [ 552.494094][T30853] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.7496: bad orphan inode 134217728 [ 552.505038][T30853] loop1: lost filesystem error report for type 5 error -117 [ 552.510026][T30853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.574231][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.638244][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 552.638259][ T28] audit: type=1400 audit(1776547497.264:1711): avc: denied { accept } for pid=30860 comm="syz.4.7502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.058691][T30877] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.7508'. [ 553.148907][T30879] netlink: 'syz.1.7509': attribute type 1 has an invalid length. [ 553.196963][T30879] 8021q: adding VLAN 0 to HW filter on device bond1 [ 553.408240][T30881] bond1: (slave geneve2): making interface the new active one [ 553.436667][T30881] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 554.190315][ T28] audit: type=1400 audit(1776547498.814:1712): avc: denied { add_name } for pid=30931 comm="syz.9.7539" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 554.237252][ T28] audit: type=1400 audit(1776547498.814:1713): avc: denied { create } for pid=30931 comm="syz.9.7539" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=file permissive=1 [ 554.302124][ T3436] IPVS: starting estimator thread 0... [ 554.392557][T30941] IPVS: using max 2448 ests per chain, 122400 per kthread [ 554.415847][T30949] netlink: 'syz.3.7536': attribute type 1 has an invalid length. [ 554.460248][T30949] bond1: entered promiscuous mode [ 554.474384][T30949] bond1: entered allmulticast mode [ 554.505536][T30949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 554.563523][T30955] macvlan2: entered promiscuous mode [ 554.569768][T30955] macvlan2: entered allmulticast mode [ 554.588184][T30955] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 555.632188][ T28] audit: type=1400 audit(1776547500.254:1714): avc: denied { map } for pid=30991 comm="syz.4.7555" path="socket:[98208]" dev="sockfs" ino=98208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 555.763679][T31000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7559'. [ 555.795688][T31000] netlink: 'syz.4.7559': attribute type 7 has an invalid length. [ 555.834773][T31000] netlink: 'syz.4.7559': attribute type 8 has an invalid length. [ 555.861927][T31000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7559'. [ 556.320076][T31015] random: crng reseeded on system resumption [ 556.704750][T31042] loop1: detected capacity change from 0 to 4096 [ 556.727591][T31042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.799978][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.094433][T31079] netlink: 'syz.4.7583': attribute type 30 has an invalid length. [ 557.104302][T31079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7583'. [ 557.135974][T31079] netlink: 'syz.4.7583': attribute type 30 has an invalid length. [ 557.152166][T31079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7583'. [ 557.280136][T31090] netlink: 'syz.4.7585': attribute type 2 has an invalid length. [ 557.327273][T31100] netlink: 'syz.2.7597': attribute type 4 has an invalid length. [ 557.353620][T31100] netlink: 'syz.2.7597': attribute type 4 has an invalid length. [ 557.464209][ T9070] Bluetooth: hci0: Frame reassembly failed (-84) [ 557.969878][ T28] audit: type=1326 audit(1776547502.594:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.003808][ T28] audit: type=1326 audit(1776547502.594:1716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.033019][ T28] audit: type=1326 audit(1776547502.594:1717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.057821][ T28] audit: type=1326 audit(1776547502.594:1718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.088369][ T28] audit: type=1326 audit(1776547502.594:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.112689][ T28] audit: type=1326 audit(1776547502.594:1720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.136422][ T28] audit: type=1326 audit(1776547502.594:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.160081][ T28] audit: type=1326 audit(1776547502.594:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.187063][ T28] audit: type=1326 audit(1776547502.594:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.211172][ T28] audit: type=1326 audit(1776547502.594:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31174 comm="syz.9.7602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 558.256964][T31189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7607'. [ 558.278074][T31192] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7608'. [ 558.394629][T31205] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7613'. [ 558.524448][T31221] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7621'. [ 559.227334][ T3436] kernel write not supported for file bpf-prog (pid: 3436 comm: kworker/1:7) [ 559.339861][T31270] loop1: detected capacity change from 0 to 256 [ 559.370865][T31270] FAT-fs (loop1): codepage cp1250 not found [ 559.532207][T23436] Bluetooth: hci0: command 0x1003 tx timeout [ 559.538272][T23488] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 559.595618][T31285] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7645'. [ 559.929119][T31314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7659'. [ 559.952987][T31314] team0 (unregistering): Port device team_slave_0 removed [ 559.960981][T31314] team0 (unregistering): Port device team_slave_1 removed [ 560.448483][T31333] netlink: 'syz.1.7666': attribute type 4 has an invalid length. [ 560.456687][T31333] netlink: 'syz.1.7666': attribute type 4 has an invalid length. [ 562.169338][T31374] lo: entered allmulticast mode [ 562.175318][T31374] tunl0: entered allmulticast mode [ 562.181159][T31374] gre0: entered allmulticast mode [ 562.187594][T31374] gretap0: entered allmulticast mode [ 562.194137][T31374] erspan0: entered allmulticast mode [ 562.200352][T31374] ip_vti0: entered allmulticast mode [ 562.206233][T31374] ip6_vti0: entered allmulticast mode [ 562.212409][T31374] sit0: entered allmulticast mode [ 562.219126][T31374] ip6tnl0: entered allmulticast mode [ 562.228246][T31374] ip6gre0: entered allmulticast mode [ 562.234600][T31374] syz_tun: entered allmulticast mode [ 562.240962][T31374] ip6gretap0: entered allmulticast mode [ 562.249377][T31374] bridge0: entered allmulticast mode [ 562.258467][T31374] vcan0: entered allmulticast mode [ 562.266859][T31374] team0: entered allmulticast mode [ 562.272433][T31374] team_slave_0: entered allmulticast mode [ 562.278658][T31374] team_slave_1: entered allmulticast mode [ 562.287046][T31374] dummy0: entered allmulticast mode [ 562.295450][T31374] nlmon0: entered allmulticast mode [ 562.302814][T31374] caif0: entered allmulticast mode [ 562.308286][T31374] vxcan0: entered allmulticast mode [ 562.314180][T31374] vxcan1: entered allmulticast mode [ 562.320079][T31374] veth0: entered allmulticast mode [ 562.326183][T31374] veth1: entered allmulticast mode [ 562.331622][T31374] wg0: entered allmulticast mode [ 562.338495][T31374] wg1: entered allmulticast mode [ 562.344201][T31374] wg2: entered allmulticast mode [ 562.349886][T31374] veth0_to_bridge: entered allmulticast mode [ 562.356934][T31374] veth1_to_bridge: entered allmulticast mode [ 562.364200][T31374] veth0_to_bond: entered allmulticast mode [ 562.370614][T31374] bond_slave_0: entered allmulticast mode [ 562.377109][T31374] veth1_to_bond: entered allmulticast mode [ 562.383468][T31374] bond_slave_1: entered allmulticast mode [ 562.390190][T31374] veth0_to_team: entered allmulticast mode [ 562.396628][T31374] veth1_to_team: entered allmulticast mode [ 562.403979][T31374] veth1_to_batadv: entered allmulticast mode [ 562.410330][T31374] batadv_slave_1: entered allmulticast mode [ 562.417417][T31374] xfrm0: entered allmulticast mode [ 562.423442][T31374] veth0_to_hsr: entered allmulticast mode [ 562.429978][T31374] hsr_slave_0: entered allmulticast mode [ 562.436336][T31374] veth1_to_hsr: entered allmulticast mode [ 562.445202][T31374] hsr_slave_1: entered allmulticast mode [ 562.451088][T31374] hsr0: entered allmulticast mode [ 562.457055][T31374] veth1_virt_wifi: entered allmulticast mode [ 562.463619][T31374] veth0_virt_wifi: entered allmulticast mode [ 562.470416][T31374] veth1_vlan: entered allmulticast mode [ 562.476642][T31374] veth0_vlan: entered allmulticast mode [ 562.483063][T31374] vlan0: entered allmulticast mode [ 562.488580][T31374] vlan1: entered allmulticast mode [ 562.494155][T31374] macvlan0: entered allmulticast mode [ 562.499917][T31374] macvlan1: entered allmulticast mode [ 562.506070][T31374] ipvlan0: entered allmulticast mode [ 562.512116][T31374] ipvlan1: entered allmulticast mode [ 562.518456][T31374] veth1_macvtap: entered allmulticast mode [ 562.524954][T31374] veth0_macvtap: entered allmulticast mode [ 562.531501][T31374] macvtap0: entered allmulticast mode [ 562.537342][T31374] macsec0: entered allmulticast mode [ 562.543303][T31374] geneve0: entered allmulticast mode [ 562.549135][T31374] geneve1: entered allmulticast mode [ 562.556221][T31374] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 562.564205][T31374] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 562.572399][T31374] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 562.580457][T31374] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 562.590095][T31374] geneve2: left promiscuous mode [ 562.598026][T31374] : entered allmulticast mode [ 562.605114][T31374] veth2: entered allmulticast mode [ 562.610793][T31374] veth3: entered allmulticast mode [ 562.617300][T31374] ip6gre1: left promiscuous mode [ 562.624573][T31374] gtp0: entered allmulticast mode [ 562.632436][T31374] bridge1: entered allmulticast mode [ 562.657204][T31374] bridge0.257: entered allmulticast mode [ 562.674969][T31374] vlan2: entered allmulticast mode [ 562.685739][T31374] veth4: entered allmulticast mode [ 562.694084][T31374] veth5: entered allmulticast mode [ 562.702256][T31374] bond1: left promiscuous mode [ 562.707435][ T3599] lo speed is unknown, defaulting to 1000 [ 562.713599][ T9055] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.724303][ T3599] lyz2: Port: 1 Link DOWN [ 562.732008][ T9055] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 256 - 0 [ 562.744880][ T3599] lo speed is unknown, defaulting to 1000 [ 562.750667][ T9055] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.759731][ T9055] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 562.768694][ T9055] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.777999][ T9055] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 562.788161][ T9055] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 562.797224][ T9055] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 562.862569][T31378] netlink: 'syz.2.7684': attribute type 1 has an invalid length. [ 562.867766][T31309] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.870464][T31378] netlink: 264 bytes leftover after parsing attributes in process `syz.2.7684'. [ 562.922154][T31378] netlink: 'syz.2.7684': attribute type 1 has an invalid length. [ 562.942931][T31378] netlink: 264 bytes leftover after parsing attributes in process `syz.2.7684'. [ 562.973829][T31378] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7684'. [ 563.050104][ T3436] kernel write not supported for file bpf-prog (pid: 3436 comm: kworker/1:7) [ 563.099302][T31396] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7691'. [ 563.120408][T31398] netlink: 'syz.2.7692': attribute type 1 has an invalid length. [ 563.179519][T31398] bond1: entered promiscuous mode [ 563.198991][T31398] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.226892][T31404] netlink: 'syz.1.7694': attribute type 4 has an invalid length. [ 563.244726][T31400] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 563.258495][T31400] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 563.269869][T31400] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 563.281097][T31400] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 563.346922][T31405] netlink: 'syz.1.7694': attribute type 4 has an invalid length. [ 563.457977][T31410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7696'. [ 563.477428][T31410] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7696'. [ 563.554260][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 563.554291][ T28] audit: type=1400 audit(1776547508.184:1776): avc: denied { bind } for pid=31417 comm="syz.9.7701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 564.859196][T31445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7711'. [ 565.830262][ T28] audit: type=1400 audit(1776547510.454:1777): avc: denied { ioctl } for pid=31448 comm="syz.3.7712" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 565.859898][T31451] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7714'. [ 565.878635][T31451] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7714'. [ 566.001121][T31468] loop1: detected capacity change from 0 to 128 [ 566.052873][T31468] syz.1.7721: attempt to access beyond end of device [ 566.052873][T31468] loop1: rw=0, sector=121, nr_sectors = 416 limit=128 [ 566.855988][T31493] netlink: 'syz.9.7730': attribute type 1 has an invalid length. [ 566.887815][T31493] bond10: entered promiscuous mode [ 566.899787][T31493] 8021q: adding VLAN 0 to HW filter on device bond10 [ 567.025037][T31508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7737'. [ 567.066334][T31508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 567.101102][T31516] xt_hashlimit: size too large, truncated to 1048576 [ 567.117119][T31508] macsec1: entered promiscuous mode [ 567.147020][T31508] bond2: entered promiscuous mode [ 567.152656][T31508] macsec1: entered allmulticast mode [ 567.157995][T31508] bond2: entered allmulticast mode [ 567.163620][T31508] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 567.173230][T31508] bond2: left allmulticast mode [ 567.198833][T31508] bond2: left promiscuous mode [ 567.523689][T31487] kexec: Could not allocate control_code_buffer [ 568.054892][ T28] audit: type=1400 audit(1776547512.684:1778): avc: denied { mounton } for pid=31545 comm="syz.2.7749" path="/1023/net/rt_cache" dev="proc" ino=4026533897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 568.229472][T31556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7754'. [ 568.530130][T31574] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7761'. [ 568.560238][T31574] vlan0: entered promiscuous mode [ 568.565731][T31574] bridge0: entered promiscuous mode [ 568.703146][T31588] lo: entered allmulticast mode [ 568.725939][T31588] tunl0: entered allmulticast mode [ 568.739906][T31588] gre0: entered allmulticast mode [ 568.754493][T31588] gretap0: entered allmulticast mode [ 568.783988][T31588] erspan0: entered allmulticast mode [ 568.790109][T31588] ip_vti0: entered allmulticast mode [ 568.807692][T31588] ip6_vti0: entered allmulticast mode [ 568.832691][T31588] sit0: entered allmulticast mode [ 568.885121][T31588] ip6tnl0: entered allmulticast mode [ 568.904771][T31588] ip6gre0: entered allmulticast mode [ 568.938178][T31588] syz_tun: entered allmulticast mode [ 568.954758][T31594] loop4: detected capacity change from 0 to 512 [ 568.962179][T31596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7771'. [ 568.985410][T31588] ip6gretap0: entered allmulticast mode [ 569.006939][T31588] bridge0: entered allmulticast mode [ 569.013395][T31594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 569.028058][T31588] dummy0: entered allmulticast mode [ 569.034231][T31588] nlmon0: entered allmulticast mode [ 569.040240][T31588] caif0: entered allmulticast mode [ 569.041246][T31594] ext4 filesystem being mounted at /489/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 569.056390][T31588] veth0: entered allmulticast mode [ 569.061943][T31594] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.071036][T31588] veth1: entered allmulticast mode [ 569.076472][T31588] wg1: entered allmulticast mode [ 569.081607][T31588] wg2: entered allmulticast mode [ 569.086699][T31588] veth0_to_bridge: entered allmulticast mode [ 569.092930][T31588] veth1_to_bridge: entered allmulticast mode [ 569.099252][T31588] veth0_to_bond: entered allmulticast mode [ 569.105354][T31588] bond_slave_0: entered allmulticast mode [ 569.111255][T31588] veth1_to_bond: entered allmulticast mode [ 569.117212][T31588] bond_slave_1: entered allmulticast mode [ 569.123254][T31588] veth0_to_team: entered allmulticast mode [ 569.129242][T31588] team_slave_0: entered allmulticast mode [ 569.135218][T31588] veth1_to_team: entered allmulticast mode [ 569.141261][T31588] team_slave_1: entered allmulticast mode [ 569.147391][T31588] veth0_to_batadv: entered allmulticast mode [ 569.153563][T31588] batadv_slave_0: entered allmulticast mode [ 569.159777][T31588] xfrm0: entered allmulticast mode [ 569.165478][T31588] veth0_to_hsr: entered allmulticast mode [ 569.171378][T31588] hsr_slave_0: entered allmulticast mode [ 569.177602][T31588] veth1_to_hsr: entered allmulticast mode [ 569.183732][T31588] hsr_slave_1: entered allmulticast mode [ 569.189514][T31588] veth1_virt_wifi: entered allmulticast mode [ 569.238997][T31588] veth0_virt_wifi: entered allmulticast mode [ 569.259370][T31588] veth1_macvtap: entered allmulticast mode [ 569.265507][T31588] veth0_macvtap: entered allmulticast mode [ 569.271484][T31588] macvtap0: entered allmulticast mode [ 569.277282][T31588] macsec0: entered allmulticast mode [ 569.282852][T31588] geneve0: entered allmulticast mode [ 569.288258][T31588] geneve1: entered allmulticast mode [ 569.293996][T31588] vti60: entered allmulticast mode [ 569.299369][T31588] @: entered allmulticast mode [ 569.304834][T31588] ip6tnl1: entered allmulticast mode [ 569.310314][T31588] gre1: entered allmulticast mode [ 569.315731][T31588] ip6tnl2: entered allmulticast mode [ 569.321265][T31588] ip6gretap1: entered allmulticast mode [ 569.327233][T31588] gretap1: entered allmulticast mode [ 569.334790][T31588] ip6erspan0: entered allmulticast mode [ 569.346840][T31588] ip6gre1: entered allmulticast mode [ 569.359882][T31588] bond1: entered allmulticast mode [ 569.371069][T31588] geneve2: entered allmulticast mode [ 569.382647][T31588] bond2: entered allmulticast mode [ 569.400107][T31588] geneve3: entered allmulticast mode [ 569.422082][T31588] bond3: entered allmulticast mode [ 569.446668][T31588] bond4: entered allmulticast mode [ 569.465950][T31588] sit1: entered allmulticast mode [ 569.478722][ T28] audit: type=1326 audit(1776547514.104:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 569.508219][T31588] bond5: entered allmulticast mode [ 569.525637][T31588] macvtap1: entered allmulticast mode [ 569.538708][T31588] bond6: entered allmulticast mode [ 569.549853][T31588] gretap2: entered allmulticast mode [ 569.555476][ T28] audit: type=1326 audit(1776547514.104:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 569.589643][T31588] bond7: entered allmulticast mode [ 569.601725][T31560] kexec: Could not allocate control_code_buffer [ 569.608262][T31588] syztnl1: entered allmulticast mode [ 569.616898][T31588] gtp0: entered allmulticast mode [ 569.623876][ T28] audit: type=1326 audit(1776547514.104:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 569.624904][T31588] bond8: entered allmulticast mode [ 569.660368][ T28] audit: type=1326 audit(1776547514.104:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 569.684215][T31588] veth2: entered allmulticast mode [ 569.689627][ T28] audit: type=1326 audit(1776547514.104:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 569.713332][T31588] veth3: entered allmulticast mode [ 569.720396][T31588] bond0: entered allmulticast mode [ 569.726019][T31588] ip6gre2: entered allmulticast mode [ 569.731433][ T28] audit: type=1326 audit(1776547514.154:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb33e5d04e code=0x7ffc0000 [ 569.755284][T31588] veth4: entered allmulticast mode [ 569.767917][T31588] veth5: entered allmulticast mode [ 569.773677][T31588] veth6: entered allmulticast mode [ 569.778956][T31588] veth7: entered allmulticast mode [ 569.784345][ T28] audit: type=1326 audit(1776547514.184:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7feb33e5d04e code=0x7ffc0000 [ 569.808495][ T28] audit: type=1326 audit(1776547514.244:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 569.832458][T31588] bridge1: entered allmulticast mode [ 569.840622][T31588] veth8: entered allmulticast mode [ 569.845992][ T28] audit: type=1326 audit(1776547514.244:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 569.871077][T31588] veth9: entered allmulticast mode [ 569.876107][ T28] audit: type=1326 audit(1776547514.354:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31602 comm="syz.1.7773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7feb33e9c819 code=0x7ffc0000 [ 569.893739][T31588] ip6tnl3: entered allmulticast mode [ 569.909037][T31588] veth10: entered allmulticast mode [ 569.914737][T31588] veth11: entered allmulticast mode [ 569.920260][T31588] gre2: entered allmulticast mode [ 569.928303][T31588] netdevsim netdevsim9 eth0: entered allmulticast mode [ 569.935423][T31588] netdevsim netdevsim9 eth1: entered allmulticast mode [ 569.942543][T31588] netdevsim netdevsim9 eth2: entered allmulticast mode [ 569.949564][T31588] netdevsim netdevsim9 eth3: entered allmulticast mode [ 569.957102][T31588] bridge2: entered allmulticast mode [ 569.966354][T31588] bridge3: entered allmulticast mode [ 569.972641][T31588] gre3: entered allmulticast mode [ 569.979857][T31588] bridge4: entered allmulticast mode [ 569.986759][T31588] veth12: entered allmulticast mode [ 569.992331][T31588] veth13: entered allmulticast mode [ 569.997802][T31588] sit2: entered allmulticast mode [ 570.005923][T31588] bridge6: entered allmulticast mode [ 570.012133][T31588] veth14: entered allmulticast mode [ 570.017540][T31588] veth15: entered allmulticast mode [ 570.024169][T31588] bridge7: entered allmulticast mode [ 570.030111][T31588] veth16: entered allmulticast mode [ 570.036018][T31588] veth17: entered allmulticast mode [ 570.041771][T31588] bond10: left promiscuous mode [ 570.047041][T31588] bond10: entered allmulticast mode [ 570.052837][T31588] vlan0: left promiscuous mode [ 570.057806][T31588] bridge0: left promiscuous mode [ 570.063199][T31588] vlan0: entered allmulticast mode [ 570.088359][T31620] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7778'. [ 570.346649][T31640] loop4: detected capacity change from 0 to 512 [ 570.370227][T31640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.558600][T21819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.401343][T31675] netlink: 'syz.1.7802': attribute type 1 has an invalid length. [ 571.416581][T31675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 571.431470][T31675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7802'. [ 571.440825][T31675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7802'. [ 571.460762][T31675] macsec1: entered promiscuous mode [ 571.470278][T31675] bond2: entered promiscuous mode [ 571.472782][T31680] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.7803'. [ 571.476401][T31675] macsec1: entered allmulticast mode [ 571.490358][T31675] bond2: entered allmulticast mode [ 571.496131][T31675] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 571.579612][T31691] netlink: 'syz.2.7809': attribute type 19 has an invalid length. [ 571.604307][T31691] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.7809'. [ 571.837200][T31716] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.7816'. [ 571.846631][T31716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7816'. [ 571.952947][T31724] netlink: 'syz.1.7823': attribute type 19 has an invalid length. [ 572.046410][T31732] bond3: entered promiscuous mode [ 572.204849][T31747] 8021q: adding VLAN 0 to HW filter on device bond11 [ 572.221393][T31747] macsec1: entered promiscuous mode [ 572.233927][T31747] bond11: entered promiscuous mode [ 572.240410][T31747] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 572.255538][T31747] bond11: left promiscuous mode [ 572.484918][T31762] vlan3: entered allmulticast mode [ 572.896954][ T3425] hid-generic 0004:0004:FFFF0001.0009: unknown main item tag 0x0 [ 572.904907][ T3425] hid-generic 0004:0004:FFFF0001.0009: unknown main item tag 0x0 [ 572.913788][ T3425] hid-generic 0004:0004:FFFF0001.0009: unknown main item tag 0x0 [ 572.932005][ T3425] hid-generic 0004:0004:FFFF0001.0009: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 574.062132][T31841] netlink: 'syz.3.7869': attribute type 4 has an invalid length. [ 574.071246][T31841] netlink: 'syz.3.7869': attribute type 4 has an invalid length. [ 574.081472][T27497] lo speed is unknown, defaulting to 1000 [ 574.088156][T31841] lo: left allmulticast mode [ 574.095903][T31841] tunl0: left allmulticast mode [ 574.108513][T31841] gre0: left allmulticast mode [ 574.114822][T31841] erspan0: left allmulticast mode [ 574.120367][T31841] ip_vti0: left allmulticast mode [ 574.126605][T31841] ip6_vti0: left allmulticast mode [ 574.132896][T31841] sit0: left allmulticast mode [ 574.138197][T31841] ip6tnl0: left allmulticast mode [ 574.143975][T31841] ip6gre0: left allmulticast mode [ 574.149478][T31841] syz_tun: left allmulticast mode [ 574.155357][T31841] ip6gretap0: left allmulticast mode [ 574.160886][T31841] vcan0: left allmulticast mode [ 574.166037][T31841] team0: left allmulticast mode [ 574.171040][T31841] dummy0: left allmulticast mode [ 574.176278][T31841] nlmon0: left allmulticast mode [ 574.181415][T31841] caif0: left allmulticast mode [ 574.186434][T31841] veth0: left allmulticast mode [ 574.191406][T31841] veth1: left allmulticast mode [ 574.196563][T31841] wg0: left allmulticast mode [ 574.201420][T31841] wg1: left allmulticast mode [ 574.206225][T31841] wg2: left allmulticast mode [ 574.211017][T31841] veth0_to_bridge: left allmulticast mode [ 574.217106][T31841] veth1_to_bridge: left allmulticast mode [ 574.223104][T31841] veth0_to_bond: left allmulticast mode [ 574.228748][T31841] bond_slave_0: left allmulticast mode [ 574.234411][T31841] veth1_to_bond: left allmulticast mode [ 574.240238][T31841] bond_slave_1: left allmulticast mode [ 574.245950][T31841] veth0_to_team: left allmulticast mode [ 574.251637][T31841] team_slave_0: left allmulticast mode [ 574.257268][T31841] veth1_to_team: left allmulticast mode [ 574.264429][T31841] team_slave_1: left allmulticast mode [ 574.270097][T31841] veth1_to_batadv: left allmulticast mode [ 574.276460][T31841] batadv_slave_1: left allmulticast mode [ 574.282374][T31841] xfrm0: left allmulticast mode [ 574.287424][T31841] veth0_to_hsr: left allmulticast mode [ 574.293153][T31841] veth1_to_hsr: left allmulticast mode [ 574.298850][T31841] hsr0: left allmulticast mode [ 574.303751][T31841] hsr_slave_0: left allmulticast mode [ 574.309199][T31841] hsr_slave_1: left allmulticast mode [ 574.314988][T31841] veth1_virt_wifi: left allmulticast mode [ 574.320911][T31841] veth0_virt_wifi: left allmulticast mode [ 574.326935][T31841] veth1_vlan: left allmulticast mode [ 574.332459][T31841] vlan0: left allmulticast mode [ 574.337443][T31841] vlan1: left allmulticast mode [ 574.342541][T31841] macvlan0: left allmulticast mode [ 574.347817][T31841] macvlan1: left allmulticast mode [ 574.353425][T31841] ipvlan0: left allmulticast mode [ 574.358683][T31841] ipvlan1: left allmulticast mode [ 574.363877][T31841] veth0_vlan: left allmulticast mode [ 574.369382][T31841] veth1_macvtap: left allmulticast mode [ 574.376308][T31841] veth0_macvtap: left allmulticast mode [ 574.382606][T31841] macsec0: left allmulticast mode [ 574.387811][T31841] geneve0: left allmulticast mode [ 574.393120][T31841] geneve1: left allmulticast mode [ 574.398292][T31841] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 574.405978][T31841] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 574.413841][T31841] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 574.421133][T31841] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 574.428540][T31841] geneve2: left allmulticast mode [ 574.434026][T31841] : left allmulticast mode [ 574.438685][T31841] veth2: left allmulticast mode [ 574.443725][T31841] veth3: left allmulticast mode [ 574.448845][T31841] ip6gre1: left allmulticast mode [ 574.454027][T31841] gtp0: left allmulticast mode [ 574.458989][T31841] bridge1: left allmulticast mode [ 574.464328][T31841] bridge0.257: left allmulticast mode [ 574.469869][T31841] bridge0: left allmulticast mode [ 574.475090][T31841] vlan2: left allmulticast mode [ 574.480097][T31841] gretap0: left allmulticast mode [ 574.486536][T31841] bond0: left allmulticast mode [ 574.491626][T31841] bridge2: left allmulticast mode [ 574.497476][T31841] veth4: left allmulticast mode [ 574.502556][T31841] veth5: left allmulticast mode [ 574.507575][T31841] bond1: left allmulticast mode [ 574.513440][T31841] vlan3: left allmulticast mode [ 574.518384][T31841] macvtap0: left allmulticast mode [ 574.524073][ T3425] lo speed is unknown, defaulting to 1000 [ 574.541573][T27496] lo speed is unknown, defaulting to 1000 [ 574.589970][T31851] lo speed is unknown, defaulting to 1000 [ 574.861238][T31868] loop1: detected capacity change from 0 to 512 [ 574.898048][T31868] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 574.935345][T31868] EXT4-fs (loop1): orphan cleanup on readonly fs [ 574.954860][T31868] EXT4-fs error (device loop1): ext4_quota_enable:7221: comm syz.1.7878: Bad quota inum: 393216, type: 0 [ 574.995464][T31873] __nla_validate_parse: 5 callbacks suppressed [ 574.995560][T31873] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7880'. [ 575.011018][T31868] loop1: lost filesystem error report for type 5 error -117 [ 575.014784][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 575.028555][ C0] EXT4-fs (loop1): initial error at time 1776547775: ext4_quota_enable:7221 [ 575.037285][ C0] EXT4-fs (loop1): last error at time 1776547775: ext4_quota_enable:7221 [ 575.048004][T31868] EXT4-fs warning (device loop1): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=393216). Please run e2fsck to fix. [ 575.063129][T31868] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 575.070418][T31868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 575.085614][T31868] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.7878: corrupted xattr block 31: invalid header [ 575.118423][T31868] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 575.147221][T31868] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.7878: corrupted xattr block 31: invalid header [ 575.167745][T31876] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #16: comm syz.1.7878: corrupted xattr block 31: invalid header [ 575.181660][T31868] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 575.190769][ T28] kauditd_printk_skb: 71 callbacks suppressed [ 575.190783][ T28] audit: type=1400 audit(1776547775.819:1860): avc: denied { read } for pid=31867 comm="syz.1.7878" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 575.219684][T31868] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.7878: bad symlink. [ 575.230932][T31876] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=16 [ 575.246772][T31876] EXT4-fs error (device loop1): ext4_get_link:106: inode #16: comm syz.1.7878: bad symlink. [ 575.339549][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.566968][T31885] ref_ctr increment failed for inode: 0x1c95 offset: 0x7 ref_ctr_offset: 0x6f6c of mm: 0xffff888103d65e80 [ 575.729004][T31892] 8021q: adding VLAN 0 to HW filter on device bond12 [ 575.772525][T31896] bond12: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 575.796168][T31895] netlink: 5 bytes leftover after parsing attributes in process `syz.4.7888'. [ 575.832035][ T9055] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 575.972809][ T9100] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 576.001170][T31905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7892'. [ 576.151381][T31907] loop4: detected capacity change from 0 to 1024 [ 576.168445][T31907] EXT4-fs: inline encryption not supported [ 576.206537][T31907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 576.410338][ T28] audit: type=1326 audit(1776547777.039:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31912 comm="syz.9.7894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 576.461979][ T28] audit: type=1326 audit(1776547777.039:1862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31912 comm="syz.9.7894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 576.517886][ T28] audit: type=1326 audit(1776547777.039:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31912 comm="syz.9.7894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 576.571939][ T28] audit: type=1326 audit(1776547777.039:1864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31912 comm="syz.9.7894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 576.617317][ T28] audit: type=1326 audit(1776547777.069:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31912 comm="syz.9.7894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 576.670295][ T28] audit: type=1326 audit(1776547777.069:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31912 comm="syz.9.7894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 576.719884][ T28] audit: type=1326 audit(1776547777.069:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31912 comm="syz.9.7894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 576.771934][ T28] audit: type=1326 audit(1776547777.069:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31912 comm="syz.9.7894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 576.826843][ T28] audit: type=1326 audit(1776547777.069:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31912 comm="syz.9.7894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5de9a0c819 code=0x7ffc0000 [ 576.992733][T21819] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.085929][T31928] lo speed is unknown, defaulting to 1000 [ 577.103130][T27496] IPVS: starting estimator thread 0... [ 577.129813][T31931] loop1: detected capacity change from 0 to 1024 [ 577.175372][T31931] IPVS: sed: FWM 3 0x00000003 - no destination available [ 577.201949][T31932] IPVS: using max 2352 ests per chain, 117600 per kthread [ 578.088051][T31942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7905'. [ 578.118581][T31940] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 578.267069][ T9100] Bluetooth: hci0: Frame reassembly failed (-84) [ 578.348605][ T3425] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 578.365969][ T3425] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 578.571110][T31977] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 578.591970][T31977] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7917'. [ 578.647798][T31983] xt_limit: Overflow, try lower: 0/0 [ 578.661816][T31983] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 579.110088][T32006] bridge3: entered promiscuous mode [ 579.127249][T32006] bridge3: entered allmulticast mode [ 579.144209][T32006] team0: Port device bridge3 added [ 579.158105][T32010] bridge0: port 3(team0) entered blocking state [ 579.172008][T32010] bridge0: port 3(team0) entered disabled state [ 579.188762][T32010] team0: entered allmulticast mode [ 579.200107][T32010] team_slave_0: entered allmulticast mode [ 579.217633][T32010] team_slave_1: entered allmulticast mode [ 579.234725][T32010] team0: entered promiscuous mode [ 579.249956][T32010] team_slave_0: entered promiscuous mode [ 579.260166][T32010] team_slave_1: entered promiscuous mode [ 579.719672][T32021] netlink: 277 bytes leftover after parsing attributes in process `syz.1.7937'. [ 580.321909][T23436] Bluetooth: hci0: command 0x1003 tx timeout [ 580.327974][T23488] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 580.641046][T32066] netlink: 'syz.9.7952': attribute type 2 has an invalid length. [ 580.656503][T32066] netlink: 'syz.9.7952': attribute type 8 has an invalid length. [ 580.667290][T32066] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7952'. [ 581.150715][T31949] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 581.527284][T32090] lo speed is unknown, defaulting to 1000 [ 581.905145][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 581.905242][ T28] audit: type=1326 audit(1776547782.539:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32098 comm="syz.9.7963" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5de9a0c819 code=0x0 [ 582.094626][T32102] IPv6: sit1: Disabled Multicast RS [ 582.564420][T32127] syzkaller0: entered promiscuous mode [ 582.570548][T32127] syzkaller0: entered allmulticast mode [ 582.645477][T32133] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7977'. [ 582.685540][ T28] audit: type=1326 audit(1776547783.319:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32136 comm="syz.1.7980" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb33e9c819 code=0x0 [ 582.758295][T32143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7982'. [ 582.773968][T32143] bond2: entered promiscuous mode [ 582.779210][T32143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 582.806951][T32143] 8021q: adding VLAN 0 to HW filter on device bond2 [ 582.816080][T32143] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 582.827205][T32143] bond2: (slave sit1): Error -95 calling set_mac_address [ 582.839518][T32149] netlink: 108 bytes leftover after parsing attributes in process `syz.9.7983'. [ 582.851431][T32149] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7983'. [ 582.917087][T32159] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7988'. [ 582.935645][T32159] bridge9: entered promiscuous mode [ 582.941680][T32159] bridge9: port 1(macvtap2) entered blocking state [ 582.948296][T32159] bridge9: port 1(macvtap2) entered disabled state [ 582.955118][T32159] macvtap2: entered allmulticast mode [ 582.960528][T32159] bridge9: entered allmulticast mode [ 582.969345][T32159] macvtap2: left allmulticast mode [ 582.975205][T32159] bridge9: left allmulticast mode [ 582.990573][T32159] bridge9: left promiscuous mode [ 583.127779][T32167] xt_limit: Overflow, try lower: 0/0 [ 583.187410][T32167] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 583.276607][ T28] audit: type=1326 audit(1776547783.909:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32174 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 583.340076][ T28] audit: type=1326 audit(1776547783.909:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32174 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 583.384039][ T28] audit: type=1326 audit(1776547783.929:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32174 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 583.408229][ T28] audit: type=1326 audit(1776547783.929:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32174 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 583.432605][ T28] audit: type=1326 audit(1776547783.929:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32174 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f05c08dc819 code=0x7ffc0000 [ 583.456996][ T28] audit: type=1326 audit(1776547783.999:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32174 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f05c089d04e code=0x7ffc0000 [ 583.480679][ T28] audit: type=1326 audit(1776547784.009:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32174 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f05c089d04e code=0x7ffc0000 [ 583.563017][ T28] audit: type=1326 audit(1776547784.009:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32174 comm="syz.3.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f05c089d04e code=0x7ffc0000 [ 583.929108][T32204] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8007'. [ 583.943800][T32204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8007'. [ 583.965041][T32215] netlink: 'syz.9.8010': attribute type 13 has an invalid length. [ 584.003084][T32215] netlink: 'syz.9.8010': attribute type 17 has an invalid length. [ 584.024338][T32215] lo: left allmulticast mode [ 584.031663][T32215] tunl0: left allmulticast mode [ 584.039058][T32215] gre0: left allmulticast mode [ 584.045503][T32215] gretap0: left allmulticast mode [ 584.056387][T32215] erspan0: left allmulticast mode [ 584.060744][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8014'. [ 584.074816][T32215] ip_vti0: left allmulticast mode [ 584.080681][T32223] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8014'. [ 584.091140][T32215] ip6_vti0: left allmulticast mode [ 584.098640][T32215] sit0: left allmulticast mode [ 584.120100][T32215] ip6tnl0: left allmulticast mode [ 584.134905][T32215] ip6gre0: left allmulticast mode [ 584.145366][T32215] syz_tun: left allmulticast mode [ 584.155532][T32215] ip6gretap0: left allmulticast mode [ 584.184475][T32215] dummy0: left allmulticast mode [ 584.191442][T32215] nlmon0: left allmulticast mode [ 584.204279][T32215] caif0: left allmulticast mode [ 584.214728][T32215] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.576830][T32267] loop3: detected capacity change from 0 to 1024 [ 584.593827][T32267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.503041][T28303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.582443][T32355] __nla_validate_parse: 4 callbacks suppressed [ 586.582463][T32355] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8068'. [ 586.792773][T32376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8078'. [ 587.002003][T32393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8084'. [ 587.011459][T32393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8084'. [ 587.085308][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 587.085328][ T28] audit: type=1326 audit(1776547787.719:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.118529][ T28] audit: type=1326 audit(1776547787.749:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.187250][ T28] audit: type=1326 audit(1776547787.749:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.232705][ T28] audit: type=1326 audit(1776547787.749:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.259797][ T28] audit: type=1326 audit(1776547787.749:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.287128][ T28] audit: type=1326 audit(1776547787.749:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.313562][ T28] audit: type=1326 audit(1776547787.749:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.357884][ T28] audit: type=1326 audit(1776547787.749:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.382338][ T28] audit: type=1326 audit(1776547787.749:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.407051][ T28] audit: type=1326 audit(1776547787.749:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32399 comm="syz.4.8088" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e0c84c819 code=0x7ffc0000 [ 587.697588][T32440] lo speed is unknown, defaulting to 1000 [ 587.723027][T32441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.739547][T32441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.169226][ T9097] Bluetooth: hci0: Frame reassembly failed (-84) [ 588.801377][T32474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.897954][T32474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.016605][T32474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.109988][T32474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.194338][ T9097] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.223969][ T9097] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.239561][T32493] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8124'. [ 589.254715][ T9086] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.272296][T32493] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8124'. [ 589.281414][ T9086] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.471568][T32509] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8131'. [ 589.503934][T32509] ip6gre3: entered promiscuous mode [ 589.509192][T32509] ip6gre3: entered allmulticast mode [ 589.532727][T32509] netlink: 'syz.9.8131': attribute type 6 has an invalid length. [ 589.540635][T32509] netlink: 72 bytes leftover after parsing attributes in process `syz.9.8131'. [ 589.781495][T32527] futex_wake_op: syz.9.8137 tries to shift op by 144; fix this program [ 590.244538][T23436] Bluetooth: hci0: command 0x1003 tx timeout [ 590.250600][T23488] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 590.256908][T32467] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 590.557147][T32563] macsec0: entered allmulticast mode [ 590.579822][T32563] veth1_macvtap: entered allmulticast mode [ 590.587405][T32563] macsec0: left allmulticast mode [ 590.593854][T32563] veth1_macvtap: left allmulticast mode [ 591.009613][T32580] loop3: detected capacity change from 0 to 2048 [ 591.064082][T32580] loop3: p1 < > p4 [ 591.072995][T32580] loop3: p4 size 722688 extends beyond EOD, truncated [ 591.699412][T32610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8167'. [ 591.720224][T32610] netlink: 'syz.2.8167': attribute type 5 has an invalid length. [ 591.740503][T32610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8167'. [ 591.794238][T32610] geneve2: entered promiscuous mode [ 591.803258][T32610] geneve2: entered allmulticast mode [ 591.817301][ T9100] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 54392 - 0 [ 591.832069][ T9100] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 54392 - 0 [ 591.886445][T32603] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 54392 - 0 [ 592.006898][T32603] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 54392 - 0 [ 592.100785][T32622] bridge_slave_0: left allmulticast mode [ 592.106670][T32622] bridge_slave_0: left promiscuous mode [ 592.112784][T32622] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.121777][T32622] bridge_slave_1: left allmulticast mode [ 592.127627][T32622] bridge_slave_1: left promiscuous mode [ 592.133847][T32622] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.163929][T32622] team0: Port device team_slave_0 removed [ 592.190878][T32622] team0: Port device team_slave_1 removed [ 592.198034][T32622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.205446][T32622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.214741][T32622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.222147][T32622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 592.231968][T32622] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 592.328225][ T9097] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 54392 - 0 [ 592.431765][ T9097] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 54392 - 0 [ 592.448364][ T9097] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 54392 - 0 [ 592.461184][ T9097] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 54392 - 0 [ 592.550889][T32638] netlink: 'syz.1.8179': attribute type 3 has an invalid length. [ 592.583405][T32638] netlink: 'syz.1.8179': attribute type 1 has an invalid length. [ 592.621248][T32638] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.8179'. [ 592.675789][T32647] netlink: 'syz.9.8183': attribute type 1 has an invalid length. [ 592.711607][T32647] 8021q: adding VLAN 0 to HW filter on device bond13 [ 592.740072][T32647] bond13: (slave veth21): Enslaving as an active interface with a down link [ 592.794757][T32654] bond13: (slave dummy0): making interface the new active one [ 592.844442][T32654] dummy0: entered promiscuous mode [ 592.892917][T32654] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 592.941397][T32647] bond13 (unregistering): (slave veth21): Releasing active interface [ 592.981653][T32647] bond13 (unregistering): (slave dummy0): Releasing active interface [ 592.990955][T32647] bond13 (unregistering): Released all slaves [ 593.114913][T32671] loop1: detected capacity change from 0 to 1024 [ 593.146420][T32671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.163411][T32671] ext4 filesystem being mounted at /271/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.178392][T32671] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.8192: lblock 0 mapped to illegal pblock 0 (length 1) [ 593.192231][T32671] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 593.204932][T32671] EXT4-fs (loop1): This should not happen!! Data will be lost [ 593.204932][T32671] [ 593.218478][T32671] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8192: bg 0: block 112: padding at end of block bitmap is not set [ 593.233336][T32671] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28 [ 593.245851][T32671] EXT4-fs (loop1): This should not happen!! Data will be lost [ 593.245851][T32671] [ 593.255693][T32671] EXT4-fs (loop1): Total free blocks count 0 [ 593.261954][T32671] EXT4-fs (loop1): Free/Dirty block details [ 593.267914][T32671] EXT4-fs (loop1): free_blocks=0 [ 593.273092][T32671] EXT4-fs (loop1): dirty_blocks=64 [ 593.278318][T32671] EXT4-fs (loop1): Block reservation details [ 593.284719][T32675] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.8192: lblock 0 mapped to illegal pblock 0 (length 1) [ 593.329011][T28223] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 593.383059][T32689] loop1: detected capacity change from 0 to 512 [ 593.409640][T32689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.450973][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.477127][T32701] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8204'. [ 593.507726][T32703] loop1: detected capacity change from 0 to 1024 [ 593.515053][T32703] EXT4-fs: Ignoring removed nobh option [ 593.520752][T32703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 593.540105][T32703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.310423][T32718] IPv6: NLM_F_REPLACE set, but no existing node found! [ 594.512284][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.391317][T32748] loop4: detected capacity change from 0 to 512 [ 595.893468][ T307] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8234'. [ 595.919340][ T307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 595.926631][ T307] IPv6: NLM_F_CREATE should be set when creating new route [ 596.219967][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8243'. [ 596.241221][ T342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8243'. [ 596.294703][ T350] netlink: 'syz.9.8247': attribute type 4 has an invalid length. [ 596.392571][ T357] loop1: detected capacity change from 0 to 512 [ 596.429751][ T357] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.579206][ T366] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8252'. [ 596.826611][ T371] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.8253'. [ 596.853922][ T371] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8253'. [ 597.351000][ T379] loop3: detected capacity change from 0 to 4096 [ 597.371075][ T379] EXT4-fs: quotafile must be on filesystem root [ 597.509529][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.612226][ T392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8263'. [ 597.971207][ T421] loop4: detected capacity change from 0 to 512 [ 598.318944][ T442] loop1: detected capacity change from 0 to 128 [ 598.480615][ T448] syzkaller0: entered promiscuous mode [ 598.494872][ T448] syzkaller0: entered allmulticast mode [ 598.524113][ T448] syzkaller0: create flow: hash 2929200255 index 1 [ 598.532654][ T28] kauditd_printk_skb: 225 callbacks suppressed [ 598.532673][ T28] audit: type=1400 audit(1776547799.169:2164): avc: denied { accept } for pid=450 comm="syz.2.8285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 598.565133][ T447] syzkaller0: delete flow: hash 2929200255 index 1 [ 598.742650][ T464] netlink: 'syz.3.8289': attribute type 12 has an invalid length. [ 598.772558][ T464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8289'. [ 598.911485][ T475] loop4: detected capacity change from 0 to 512 [ 598.944386][ T475] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 598.997230][ T28] audit: type=1400 audit(1776547799.629:2165): avc: denied { connect } for pid=478 comm="syz.1.8295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 599.071960][ T28] audit: type=1400 audit(1776547799.699:2166): avc: denied { remount } for pid=480 comm="syz.4.8296" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 599.092210][ T481] option changes via remount are deprecated (pid=480 comm=syz.4.8296) [ 599.227111][ T486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8299'. [ 599.449838][ T489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8298'. [ 599.522671][ T490] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8298'. [ 599.882964][ T28] audit: type=1326 audit(1776547800.519:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=519 comm="syz.4.8311" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5e0c84c819 code=0x0 [ 600.625837][ T555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8324'. [ 600.634878][ T555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8324'. [ 600.693608][ T553] IPv6: NLM_F_REPLACE set, but no existing node found! [ 600.789797][ T562] option changes via remount are deprecated (pid=561 comm=syz.3.8326) [ 600.855329][ T567] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8329'. [ 600.884699][ T567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.892036][ T567] IPv6: NLM_F_CREATE should be set when creating new route [ 600.930908][ T567] loop4: detected capacity change from 0 to 1764 [ 601.091212][ T580] netlink: 'syz.9.8336': attribute type 12 has an invalid length. [ 601.109500][ T583] loop4: detected capacity change from 0 to 512 [ 601.120553][ T583] EXT4-fs: Ignoring removed oldalloc option [ 601.128246][ T583] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 601.155851][ T583] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.8337: iget: bad i_size value: 38620345925642 [ 601.189808][ T583] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 601.190135][ T583] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.8337: couldn't read orphan inode 15 (err -117) [ 601.199392][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 601.199418][ C0] EXT4-fs (loop4): initial error at time 1776547801: ext4_orphan_get:1397: inode 15 [ 601.199443][ C0] EXT4-fs (loop4): last error at time 1776547801: ext4_orphan_get:1397: inode 15 [ 601.253486][ T583] loop4: lost filesystem error report for type 5 error -117 [ 601.256069][ T583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.408579][ T589] IPv6: Can't replace route, no match found [ 601.430969][ T599] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 601.471734][ T603] netlink: 'syz.2.8343': attribute type 4 has an invalid length. [ 601.483393][ T603] netlink: 'syz.2.8343': attribute type 4 has an invalid length. [ 601.818657][ T623] loop1: detected capacity change from 0 to 1024 [ 601.828403][ T623] EXT4-fs: Ignoring removed nobh option [ 601.843184][ T623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 601.874500][ T623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.889402][ T620] __nla_validate_parse: 1 callbacks suppressed [ 601.889422][ T620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8352'. [ 601.959847][ T9097] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:59: bg 0: block 5: invalid block bitmap [ 601.987167][ T9097] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 602.027932][ T9097] EXT4-fs (loop4): This should not happen!! Data will be lost [ 602.027932][ T9097] [ 602.039857][ T9097] EXT4-fs (loop4): Total free blocks count 0 [ 602.046866][ T9097] EXT4-fs (loop4): Free/Dirty block details [ 602.054407][ T9097] EXT4-fs (loop4): free_blocks=0 [ 602.060570][ T9097] EXT4-fs (loop4): dirty_blocks=16024 [ 602.068046][ T9097] EXT4-fs (loop4): Block reservation details [ 602.076369][ T9097] EXT4-fs (loop4): i_reserved_data_blocks=16024 [ 602.197043][ T9100] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 602.288968][T21819] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 602.325677][ T640] IPv6: NLM_F_REPLACE set, but no existing node found! [ 602.662551][ T660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8366'. [ 602.674954][ T660] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8366'. [ 602.696150][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.818221][ T668] loop1: detected capacity change from 0 to 1024 [ 602.830214][ T668] EXT4-fs: Ignoring removed bh option [ 602.867544][ T668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.871532][ T672] loop3: detected capacity change from 0 to 512 [ 602.919546][T28223] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.920059][ T672] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.467396][ T697] bond2: left allmulticast mode [ 603.477898][ T697] bond2: left promiscuous mode [ 603.491182][ T9063] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.513656][ T9063] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.539948][ T9063] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.566866][ T9063] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.897662][T28303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.960900][ T711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8386'. [ 605.232411][ T731] ================================================================== [ 605.240598][ T731] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 605.248449][ T731] [ 605.250789][ T731] write to 0xffffea00064c3e18 of 8 bytes by task 727 on cpu 0: [ 605.258383][ T731] __filemap_remove_folio+0x201/0x2e0 [ 605.263804][ T731] filemap_remove_folio+0x6d/0x1d0 [ 605.268956][ T731] truncate_inode_folio+0x42/0x50 [ 605.274014][ T731] shmem_undo_range+0x26d/0xb10 [ 605.278896][ T731] shmem_evict_inode+0x12e/0x540 [ 605.283870][ T731] evict+0x2af/0x510 [ 605.287803][ T731] iput+0x41a/0x580 [ 605.291650][ T731] filename_unlinkat+0x21f/0x410 [ 605.296620][ T731] vfs_coredump+0x157e/0x31e0 [ 605.301334][ T731] get_signal+0xd5c/0xf20 [ 605.305690][ T731] arch_do_signal_or_restart+0x96/0x450 [ 605.311278][ T731] irqentry_exit+0x140/0x5b0 [ 605.315903][ T731] asm_exc_page_fault+0x26/0x30 [ 605.320781][ T731] [ 605.323122][ T731] read to 0xffffea00064c3e18 of 8 bytes by task 731 on cpu 1: [ 605.330598][ T731] folio_mapping+0xa1/0xe0 [ 605.335044][ T731] evict_folios+0xdbe/0x33b0 [ 605.339682][ T731] try_to_shrink_lruvec+0x81b/0xbf0 [ 605.344926][ T731] shrink_lruvec+0x265/0x1b70 [ 605.349640][ T731] shrink_node+0x699/0x2100 [ 605.354165][ T731] do_try_to_free_pages+0x408/0xc90 [ 605.359409][ T731] try_to_free_mem_cgroup_pages+0x201/0x420 [ 605.365343][ T731] try_charge_memcg+0x373/0xa10 [ 605.370245][ T731] __memcg_kmem_charge_page+0x139/0x2b0 [ 605.375844][ T731] __alloc_frozen_pages_noprof+0x18a/0x350 [ 605.381682][ T731] alloc_pages_mpol+0xb3/0x260 [ 605.386486][ T731] alloc_pages_noprof+0x8f/0x140 [ 605.391458][ T731] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 605.397386][ T731] __kvmalloc_node_noprof+0x3d4/0x640 [ 605.402786][ T731] futex_hash_allocate+0x190/0x9a0 [ 605.407921][ T731] futex_hash_prctl+0xd8/0xf0 [ 605.412623][ T731] __se_sys_prctl+0x4f4/0x1400 [ 605.417431][ T731] __x64_sys_prctl+0x67/0x80 [ 605.422059][ T731] x64_sys_call+0x2533/0x3020 [ 605.426767][ T731] do_syscall_64+0x12c/0x3b0 [ 605.431394][ T731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.437313][ T731] [ 605.439674][ T731] value changed: 0xffff88811a845cc0 -> 0x0000000000000000 [ 605.446792][ T731] [ 605.449134][ T731] Reported by Kernel Concurrency Sanitizer on: [ 605.455308][ T731] CPU: 1 UID: 0 PID: 731 Comm: syz.1.8393 Tainted: G W syzkaller #0 PREEMPT(full) [ 605.466098][ T731] Tainted: [W]=WARN [ 605.469914][ T731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 605.480008][ T731] ==================================================================